aws-sdk-lakeformation 1.4.0 → 1.9.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 971a54c2549d5a1e23f5e429f24a023cec9ccc96da8eeb02b73e7921f16df514
4
- data.tar.gz: 8196f1868ea5dd22cc4ae0192374081c8bd496cd396b7515efa75d006a4264ad
3
+ metadata.gz: 402901ca6284d095ad80a7f62d8ec7112a3bba8f1b9d8de71ad86c929cd159e9
4
+ data.tar.gz: 60c17786e07e0d54de4651d2d2736a84a624bf573d2fc484dd3f0e3aca847015
5
5
  SHA512:
6
- metadata.gz: 274b79ffe53e547fbbb709c86784413e75b281eb10e157064a84008a0dcc85f7e89c4af44ff7df28ac8a44eefdce554b0d455435785bbf3a580e391433780e0f
7
- data.tar.gz: 1048e4ca74041e407255f965b663ec4e1e427718f804dbbe57ab8018e7ebf3b03f2a892ca5f798a6ddf1134969fe7d5e7d2b0e5cb448c50280b06a5b7909f6bb
6
+ metadata.gz: 2622b37e10385ebe76c7dfc3b179e8847c51161323d28fe69f954e266ad3c926a59d75d9ecca1d6cd0f68a229295f5d4bf2fd748239776654cb199edcea279ff
7
+ data.tar.gz: 88e2ca912b0929de7c560d0c85d883549c74a2a58dd821b7a5f2493a3952922e897660262aad274180a15d7871d77f513fd9e64ceb9e9a48d70c08c5f27cdccc
@@ -1,3 +1,5 @@
1
+ # frozen_string_literal: true
2
+
1
3
  # WARNING ABOUT GENERATED CODE
2
4
  #
3
5
  # This file is generated. See the contributing guide for more information:
@@ -42,9 +44,9 @@ require_relative 'aws-sdk-lakeformation/customizations'
42
44
  #
43
45
  # See {Errors} for more information.
44
46
  #
45
- # @service
47
+ # @!group service
46
48
  module Aws::LakeFormation
47
49
 
48
- GEM_VERSION = '1.4.0'
50
+ GEM_VERSION = '1.9.0'
49
51
 
50
52
  end
@@ -1,3 +1,5 @@
1
+ # frozen_string_literal: true
2
+
1
3
  # WARNING ABOUT GENERATED CODE
2
4
  #
3
5
  # This file is generated. See the contributing guide for more information:
@@ -24,6 +26,7 @@ require 'aws-sdk-core/plugins/jsonvalue_converter.rb'
24
26
  require 'aws-sdk-core/plugins/client_metrics_plugin.rb'
25
27
  require 'aws-sdk-core/plugins/client_metrics_send_plugin.rb'
26
28
  require 'aws-sdk-core/plugins/transfer_encoding.rb'
29
+ require 'aws-sdk-core/plugins/http_checksum.rb'
27
30
  require 'aws-sdk-core/plugins/signature_v4.rb'
28
31
  require 'aws-sdk-core/plugins/protocols/json_rpc.rb'
29
32
 
@@ -69,6 +72,7 @@ module Aws::LakeFormation
69
72
  add_plugin(Aws::Plugins::ClientMetricsPlugin)
70
73
  add_plugin(Aws::Plugins::ClientMetricsSendPlugin)
71
74
  add_plugin(Aws::Plugins::TransferEncoding)
75
+ add_plugin(Aws::Plugins::HttpChecksum)
72
76
  add_plugin(Aws::Plugins::SignatureV4)
73
77
  add_plugin(Aws::Plugins::Protocols::JsonRpc)
74
78
 
@@ -81,13 +85,28 @@ module Aws::LakeFormation
81
85
  # * `Aws::Credentials` - Used for configuring static, non-refreshing
82
86
  # credentials.
83
87
  #
88
+ # * `Aws::SharedCredentials` - Used for loading static credentials from a
89
+ # shared file, such as `~/.aws/config`.
90
+ #
91
+ # * `Aws::AssumeRoleCredentials` - Used when you need to assume a role.
92
+ #
93
+ # * `Aws::AssumeRoleWebIdentityCredentials` - Used when you need to
94
+ # assume a role after providing credentials via the web.
95
+ #
96
+ # * `Aws::SSOCredentials` - Used for loading credentials from AWS SSO using an
97
+ # access token generated from `aws login`.
98
+ #
99
+ # * `Aws::ProcessCredentials` - Used for loading credentials from a
100
+ # process that outputs to stdout.
101
+ #
84
102
  # * `Aws::InstanceProfileCredentials` - Used for loading credentials
85
103
  # from an EC2 IMDS on an EC2 instance.
86
104
  #
87
- # * `Aws::SharedCredentials` - Used for loading credentials from a
88
- # shared file, such as `~/.aws/config`.
105
+ # * `Aws::ECSCredentials` - Used for loading credentials from
106
+ # instances running in ECS.
89
107
  #
90
- # * `Aws::AssumeRoleCredentials` - Used when you need to assume a role.
108
+ # * `Aws::CognitoIdentityCredentials` - Used for loading credentials
109
+ # from the Cognito Identity service.
91
110
  #
92
111
  # When `:credentials` are not configured directly, the following
93
112
  # locations will be searched for credentials:
@@ -97,10 +116,10 @@ module Aws::LakeFormation
97
116
  # * ENV['AWS_ACCESS_KEY_ID'], ENV['AWS_SECRET_ACCESS_KEY']
98
117
  # * `~/.aws/credentials`
99
118
  # * `~/.aws/config`
100
- # * EC2 IMDS instance profile - When used by default, the timeouts are
101
- # very aggressive. Construct and pass an instance of
102
- # `Aws::InstanceProfileCredentails` to enable retries and extended
103
- # timeouts.
119
+ # * EC2/ECS IMDS instance profile - When used by default, the timeouts
120
+ # are very aggressive. Construct and pass an instance of
121
+ # `Aws::InstanceProfileCredentails` or `Aws::ECSCredentials` to
122
+ # enable retries and extended timeouts.
104
123
  #
105
124
  # @option options [required, String] :region
106
125
  # The AWS region to connect to. The configured `:region` is
@@ -161,7 +180,7 @@ module Aws::LakeFormation
161
180
  # @option options [String] :endpoint
162
181
  # The client endpoint is normally constructed from the `:region`
163
182
  # option. You should only configure an `:endpoint` when connecting
164
- # to test endpoints. This should be a valid HTTP(S) URI.
183
+ # to test or custom endpoints. This should be a valid HTTP(S) URI.
165
184
  #
166
185
  # @option options [Integer] :endpoint_cache_max_entries (1000)
167
186
  # Used for the maximum size limit of the LRU cache storing endpoints data
@@ -348,26 +367,32 @@ module Aws::LakeFormation
348
367
  # catalog: {
349
368
  # },
350
369
  # database: {
370
+ # catalog_id: "CatalogIdString",
351
371
  # name: "NameString", # required
352
372
  # },
353
373
  # table: {
374
+ # catalog_id: "CatalogIdString",
354
375
  # database_name: "NameString", # required
355
- # name: "NameString", # required
376
+ # name: "NameString",
377
+ # table_wildcard: {
378
+ # },
356
379
  # },
357
380
  # table_with_columns: {
358
- # database_name: "NameString",
359
- # name: "NameString",
381
+ # catalog_id: "CatalogIdString",
382
+ # database_name: "NameString", # required
383
+ # name: "NameString", # required
360
384
  # column_names: ["NameString"],
361
385
  # column_wildcard: {
362
386
  # excluded_column_names: ["NameString"],
363
387
  # },
364
388
  # },
365
389
  # data_location: {
390
+ # catalog_id: "CatalogIdString",
366
391
  # resource_arn: "ResourceArnString", # required
367
392
  # },
368
393
  # },
369
- # permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
370
- # permissions_with_grant_option: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
394
+ # permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
395
+ # permissions_with_grant_option: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
371
396
  # },
372
397
  # ],
373
398
  # })
@@ -377,20 +402,24 @@ module Aws::LakeFormation
377
402
  # resp.failures #=> Array
378
403
  # resp.failures[0].request_entry.id #=> String
379
404
  # resp.failures[0].request_entry.principal.data_lake_principal_identifier #=> String
405
+ # resp.failures[0].request_entry.resource.database.catalog_id #=> String
380
406
  # resp.failures[0].request_entry.resource.database.name #=> String
407
+ # resp.failures[0].request_entry.resource.table.catalog_id #=> String
381
408
  # resp.failures[0].request_entry.resource.table.database_name #=> String
382
409
  # resp.failures[0].request_entry.resource.table.name #=> String
410
+ # resp.failures[0].request_entry.resource.table_with_columns.catalog_id #=> String
383
411
  # resp.failures[0].request_entry.resource.table_with_columns.database_name #=> String
384
412
  # resp.failures[0].request_entry.resource.table_with_columns.name #=> String
385
413
  # resp.failures[0].request_entry.resource.table_with_columns.column_names #=> Array
386
414
  # resp.failures[0].request_entry.resource.table_with_columns.column_names[0] #=> String
387
415
  # resp.failures[0].request_entry.resource.table_with_columns.column_wildcard.excluded_column_names #=> Array
388
416
  # resp.failures[0].request_entry.resource.table_with_columns.column_wildcard.excluded_column_names[0] #=> String
417
+ # resp.failures[0].request_entry.resource.data_location.catalog_id #=> String
389
418
  # resp.failures[0].request_entry.resource.data_location.resource_arn #=> String
390
419
  # resp.failures[0].request_entry.permissions #=> Array
391
- # resp.failures[0].request_entry.permissions[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS"
420
+ # resp.failures[0].request_entry.permissions[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "DESCRIBE", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS"
392
421
  # resp.failures[0].request_entry.permissions_with_grant_option #=> Array
393
- # resp.failures[0].request_entry.permissions_with_grant_option[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS"
422
+ # resp.failures[0].request_entry.permissions_with_grant_option[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "DESCRIBE", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS"
394
423
  # resp.failures[0].error.error_code #=> String
395
424
  # resp.failures[0].error.error_message #=> String
396
425
  #
@@ -433,26 +462,32 @@ module Aws::LakeFormation
433
462
  # catalog: {
434
463
  # },
435
464
  # database: {
465
+ # catalog_id: "CatalogIdString",
436
466
  # name: "NameString", # required
437
467
  # },
438
468
  # table: {
469
+ # catalog_id: "CatalogIdString",
439
470
  # database_name: "NameString", # required
440
- # name: "NameString", # required
471
+ # name: "NameString",
472
+ # table_wildcard: {
473
+ # },
441
474
  # },
442
475
  # table_with_columns: {
443
- # database_name: "NameString",
444
- # name: "NameString",
476
+ # catalog_id: "CatalogIdString",
477
+ # database_name: "NameString", # required
478
+ # name: "NameString", # required
445
479
  # column_names: ["NameString"],
446
480
  # column_wildcard: {
447
481
  # excluded_column_names: ["NameString"],
448
482
  # },
449
483
  # },
450
484
  # data_location: {
485
+ # catalog_id: "CatalogIdString",
451
486
  # resource_arn: "ResourceArnString", # required
452
487
  # },
453
488
  # },
454
- # permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
455
- # permissions_with_grant_option: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
489
+ # permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
490
+ # permissions_with_grant_option: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
456
491
  # },
457
492
  # ],
458
493
  # })
@@ -462,20 +497,24 @@ module Aws::LakeFormation
462
497
  # resp.failures #=> Array
463
498
  # resp.failures[0].request_entry.id #=> String
464
499
  # resp.failures[0].request_entry.principal.data_lake_principal_identifier #=> String
500
+ # resp.failures[0].request_entry.resource.database.catalog_id #=> String
465
501
  # resp.failures[0].request_entry.resource.database.name #=> String
502
+ # resp.failures[0].request_entry.resource.table.catalog_id #=> String
466
503
  # resp.failures[0].request_entry.resource.table.database_name #=> String
467
504
  # resp.failures[0].request_entry.resource.table.name #=> String
505
+ # resp.failures[0].request_entry.resource.table_with_columns.catalog_id #=> String
468
506
  # resp.failures[0].request_entry.resource.table_with_columns.database_name #=> String
469
507
  # resp.failures[0].request_entry.resource.table_with_columns.name #=> String
470
508
  # resp.failures[0].request_entry.resource.table_with_columns.column_names #=> Array
471
509
  # resp.failures[0].request_entry.resource.table_with_columns.column_names[0] #=> String
472
510
  # resp.failures[0].request_entry.resource.table_with_columns.column_wildcard.excluded_column_names #=> Array
473
511
  # resp.failures[0].request_entry.resource.table_with_columns.column_wildcard.excluded_column_names[0] #=> String
512
+ # resp.failures[0].request_entry.resource.data_location.catalog_id #=> String
474
513
  # resp.failures[0].request_entry.resource.data_location.resource_arn #=> String
475
514
  # resp.failures[0].request_entry.permissions #=> Array
476
- # resp.failures[0].request_entry.permissions[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS"
515
+ # resp.failures[0].request_entry.permissions[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "DESCRIBE", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS"
477
516
  # resp.failures[0].request_entry.permissions_with_grant_option #=> Array
478
- # resp.failures[0].request_entry.permissions_with_grant_option[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS"
517
+ # resp.failures[0].request_entry.permissions_with_grant_option[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "DESCRIBE", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS"
479
518
  # resp.failures[0].error.error_code #=> String
480
519
  # resp.failures[0].error.error_message #=> String
481
520
  #
@@ -545,7 +584,8 @@ module Aws::LakeFormation
545
584
  req.send_request(options)
546
585
  end
547
586
 
548
- # The AWS Lake Formation principal.
587
+ # Retrieves the list of the data lake administrators of a Lake
588
+ # Formation-managed data lake.
549
589
  #
550
590
  # @option params [String] :catalog_id
551
591
  # The identifier for the Data Catalog. By default, the account ID. The
@@ -570,11 +610,13 @@ module Aws::LakeFormation
570
610
  # resp.data_lake_settings.create_database_default_permissions #=> Array
571
611
  # resp.data_lake_settings.create_database_default_permissions[0].principal.data_lake_principal_identifier #=> String
572
612
  # resp.data_lake_settings.create_database_default_permissions[0].permissions #=> Array
573
- # resp.data_lake_settings.create_database_default_permissions[0].permissions[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS"
613
+ # resp.data_lake_settings.create_database_default_permissions[0].permissions[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "DESCRIBE", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS"
574
614
  # resp.data_lake_settings.create_table_default_permissions #=> Array
575
615
  # resp.data_lake_settings.create_table_default_permissions[0].principal.data_lake_principal_identifier #=> String
576
616
  # resp.data_lake_settings.create_table_default_permissions[0].permissions #=> Array
577
- # resp.data_lake_settings.create_table_default_permissions[0].permissions[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS"
617
+ # resp.data_lake_settings.create_table_default_permissions[0].permissions[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "DESCRIBE", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS"
618
+ # resp.data_lake_settings.trusted_resource_owners #=> Array
619
+ # resp.data_lake_settings.trusted_resource_owners[0] #=> String
578
620
  #
579
621
  # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/GetDataLakeSettings AWS API Documentation
580
622
  #
@@ -585,8 +627,10 @@ module Aws::LakeFormation
585
627
  req.send_request(options)
586
628
  end
587
629
 
588
- # Returns the permissions for a specified table or database resource
589
- # located at a path in Amazon S3.
630
+ # Returns the Lake Formation permissions for a specified table or
631
+ # database resource located at a path in Amazon S3.
632
+ # `GetEffectivePermissionsForPath` will not return databases and tables
633
+ # if the catalog is encrypted.
590
634
  #
591
635
  # @option params [String] :catalog_id
592
636
  # The identifier for the Data Catalog. By default, the account ID. The
@@ -625,20 +669,26 @@ module Aws::LakeFormation
625
669
  #
626
670
  # resp.permissions #=> Array
627
671
  # resp.permissions[0].principal.data_lake_principal_identifier #=> String
672
+ # resp.permissions[0].resource.database.catalog_id #=> String
628
673
  # resp.permissions[0].resource.database.name #=> String
674
+ # resp.permissions[0].resource.table.catalog_id #=> String
629
675
  # resp.permissions[0].resource.table.database_name #=> String
630
676
  # resp.permissions[0].resource.table.name #=> String
677
+ # resp.permissions[0].resource.table_with_columns.catalog_id #=> String
631
678
  # resp.permissions[0].resource.table_with_columns.database_name #=> String
632
679
  # resp.permissions[0].resource.table_with_columns.name #=> String
633
680
  # resp.permissions[0].resource.table_with_columns.column_names #=> Array
634
681
  # resp.permissions[0].resource.table_with_columns.column_names[0] #=> String
635
682
  # resp.permissions[0].resource.table_with_columns.column_wildcard.excluded_column_names #=> Array
636
683
  # resp.permissions[0].resource.table_with_columns.column_wildcard.excluded_column_names[0] #=> String
684
+ # resp.permissions[0].resource.data_location.catalog_id #=> String
637
685
  # resp.permissions[0].resource.data_location.resource_arn #=> String
638
686
  # resp.permissions[0].permissions #=> Array
639
- # resp.permissions[0].permissions[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS"
687
+ # resp.permissions[0].permissions[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "DESCRIBE", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS"
640
688
  # resp.permissions[0].permissions_with_grant_option #=> Array
641
- # resp.permissions[0].permissions_with_grant_option[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS"
689
+ # resp.permissions[0].permissions_with_grant_option[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "DESCRIBE", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS"
690
+ # resp.permissions[0].additional_details.resource_share #=> Array
691
+ # resp.permissions[0].additional_details.resource_share[0] #=> String
642
692
  # resp.next_token #=> String
643
693
  #
644
694
  # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/GetEffectivePermissionsForPath AWS API Documentation
@@ -659,7 +709,7 @@ module Aws::LakeFormation
659
709
  #
660
710
  #
661
711
  #
662
- # [1]: https://docs-aws.amazon.com/michigan/latest/dg/security-data-access.html
712
+ # [1]: https://docs-aws.amazon.com/lake-formation/latest/dg/security-data-access.html
663
713
  #
664
714
  # @option params [String] :catalog_id
665
715
  # The identifier for the Data Catalog. By default, the account ID. The
@@ -705,26 +755,32 @@ module Aws::LakeFormation
705
755
  # catalog: {
706
756
  # },
707
757
  # database: {
758
+ # catalog_id: "CatalogIdString",
708
759
  # name: "NameString", # required
709
760
  # },
710
761
  # table: {
762
+ # catalog_id: "CatalogIdString",
711
763
  # database_name: "NameString", # required
712
- # name: "NameString", # required
764
+ # name: "NameString",
765
+ # table_wildcard: {
766
+ # },
713
767
  # },
714
768
  # table_with_columns: {
715
- # database_name: "NameString",
716
- # name: "NameString",
769
+ # catalog_id: "CatalogIdString",
770
+ # database_name: "NameString", # required
771
+ # name: "NameString", # required
717
772
  # column_names: ["NameString"],
718
773
  # column_wildcard: {
719
774
  # excluded_column_names: ["NameString"],
720
775
  # },
721
776
  # },
722
777
  # data_location: {
778
+ # catalog_id: "CatalogIdString",
723
779
  # resource_arn: "ResourceArnString", # required
724
780
  # },
725
781
  # },
726
- # permissions: ["ALL"], # required, accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
727
- # permissions_with_grant_option: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
782
+ # permissions: ["ALL"], # required, accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
783
+ # permissions_with_grant_option: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
728
784
  # })
729
785
  #
730
786
  # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/GrantPermissions AWS API Documentation
@@ -749,7 +805,7 @@ module Aws::LakeFormation
749
805
  #
750
806
  #
751
807
  #
752
- # [1]: https://docs-aws.amazon.com/michigan/latest/dg/security-data-access.html
808
+ # [1]: https://docs-aws.amazon.com/lake-formation/latest/dg/security-data-access.html
753
809
  #
754
810
  # @option params [String] :catalog_id
755
811
  # The identifier for the Data Catalog. By default, the account ID. The
@@ -796,21 +852,27 @@ module Aws::LakeFormation
796
852
  # catalog: {
797
853
  # },
798
854
  # database: {
855
+ # catalog_id: "CatalogIdString",
799
856
  # name: "NameString", # required
800
857
  # },
801
858
  # table: {
859
+ # catalog_id: "CatalogIdString",
802
860
  # database_name: "NameString", # required
803
- # name: "NameString", # required
861
+ # name: "NameString",
862
+ # table_wildcard: {
863
+ # },
804
864
  # },
805
865
  # table_with_columns: {
806
- # database_name: "NameString",
807
- # name: "NameString",
866
+ # catalog_id: "CatalogIdString",
867
+ # database_name: "NameString", # required
868
+ # name: "NameString", # required
808
869
  # column_names: ["NameString"],
809
870
  # column_wildcard: {
810
871
  # excluded_column_names: ["NameString"],
811
872
  # },
812
873
  # },
813
874
  # data_location: {
875
+ # catalog_id: "CatalogIdString",
814
876
  # resource_arn: "ResourceArnString", # required
815
877
  # },
816
878
  # },
@@ -822,20 +884,26 @@ module Aws::LakeFormation
822
884
  #
823
885
  # resp.principal_resource_permissions #=> Array
824
886
  # resp.principal_resource_permissions[0].principal.data_lake_principal_identifier #=> String
887
+ # resp.principal_resource_permissions[0].resource.database.catalog_id #=> String
825
888
  # resp.principal_resource_permissions[0].resource.database.name #=> String
889
+ # resp.principal_resource_permissions[0].resource.table.catalog_id #=> String
826
890
  # resp.principal_resource_permissions[0].resource.table.database_name #=> String
827
891
  # resp.principal_resource_permissions[0].resource.table.name #=> String
892
+ # resp.principal_resource_permissions[0].resource.table_with_columns.catalog_id #=> String
828
893
  # resp.principal_resource_permissions[0].resource.table_with_columns.database_name #=> String
829
894
  # resp.principal_resource_permissions[0].resource.table_with_columns.name #=> String
830
895
  # resp.principal_resource_permissions[0].resource.table_with_columns.column_names #=> Array
831
896
  # resp.principal_resource_permissions[0].resource.table_with_columns.column_names[0] #=> String
832
897
  # resp.principal_resource_permissions[0].resource.table_with_columns.column_wildcard.excluded_column_names #=> Array
833
898
  # resp.principal_resource_permissions[0].resource.table_with_columns.column_wildcard.excluded_column_names[0] #=> String
899
+ # resp.principal_resource_permissions[0].resource.data_location.catalog_id #=> String
834
900
  # resp.principal_resource_permissions[0].resource.data_location.resource_arn #=> String
835
901
  # resp.principal_resource_permissions[0].permissions #=> Array
836
- # resp.principal_resource_permissions[0].permissions[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS"
902
+ # resp.principal_resource_permissions[0].permissions[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "DESCRIBE", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS"
837
903
  # resp.principal_resource_permissions[0].permissions_with_grant_option #=> Array
838
- # resp.principal_resource_permissions[0].permissions_with_grant_option[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS"
904
+ # resp.principal_resource_permissions[0].permissions_with_grant_option[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "DESCRIBE", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS"
905
+ # resp.principal_resource_permissions[0].additional_details.resource_share #=> Array
906
+ # resp.principal_resource_permissions[0].additional_details.resource_share[0] #=> String
839
907
  # resp.next_token #=> String
840
908
  #
841
909
  # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/ListPermissions AWS API Documentation
@@ -898,7 +966,17 @@ module Aws::LakeFormation
898
966
  req.send_request(options)
899
967
  end
900
968
 
901
- # The AWS Lake Formation principal.
969
+ # Sets the list of data lake administrators who have admin privileges on
970
+ # all resources managed by Lake Formation. For more information on admin
971
+ # privileges, see [Granting Lake Formation Permissions][1].
972
+ #
973
+ # This API replaces the current list of data lake admins with the new
974
+ # list being passed. To add an admin, fetch the current list and add the
975
+ # new admin to that list and pass that list in this API.
976
+ #
977
+ #
978
+ #
979
+ # [1]: https://docs.aws.amazon.com/lake-formation/latest/dg/lake-formation-permissions.html
902
980
  #
903
981
  # @option params [String] :catalog_id
904
982
  # The identifier for the Data Catalog. By default, the account ID. The
@@ -907,7 +985,8 @@ module Aws::LakeFormation
907
985
  # manage your AWS Lake Formation environment.
908
986
  #
909
987
  # @option params [required, Types::DataLakeSettings] :data_lake_settings
910
- # A list of AWS Lake Formation principals.
988
+ # A structure representing a list of AWS Lake Formation principals
989
+ # designated as data lake administrators.
911
990
  #
912
991
  # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
913
992
  #
@@ -926,7 +1005,7 @@ module Aws::LakeFormation
926
1005
  # principal: {
927
1006
  # data_lake_principal_identifier: "DataLakePrincipalString",
928
1007
  # },
929
- # permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
1008
+ # permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
930
1009
  # },
931
1010
  # ],
932
1011
  # create_table_default_permissions: [
@@ -934,9 +1013,10 @@ module Aws::LakeFormation
934
1013
  # principal: {
935
1014
  # data_lake_principal_identifier: "DataLakePrincipalString",
936
1015
  # },
937
- # permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
1016
+ # permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
938
1017
  # },
939
1018
  # ],
1019
+ # trusted_resource_owners: ["CatalogIdString"],
940
1020
  # },
941
1021
  # })
942
1022
  #
@@ -960,16 +1040,36 @@ module Aws::LakeFormation
960
1040
  # attaches it to the service-linked role. When you register subsequent
961
1041
  # paths, Lake Formation adds the path to the existing policy.
962
1042
  #
1043
+ # The following request registers a new location and gives AWS Lake
1044
+ # Formation permission to use the service-linked role to access that
1045
+ # location.
1046
+ #
1047
+ # `ResourceArn = arn:aws:s3:::my-bucket UseServiceLinkedRole = true`
1048
+ #
1049
+ # If `UseServiceLinkedRole` is not set to true, you must provide or set
1050
+ # the `RoleArn`\:
1051
+ #
1052
+ # `arn:aws:iam::12345:role/my-data-access-role`
1053
+ #
963
1054
  # @option params [required, String] :resource_arn
964
1055
  # The Amazon Resource Name (ARN) of the resource that you want to
965
1056
  # register.
966
1057
  #
967
1058
  # @option params [Boolean] :use_service_linked_role
968
- # Designates a trusted caller, an IAM principal, by registering this
969
- # caller with the Data Catalog.
1059
+ # Designates an AWS Identity and Access Management (IAM) service-linked
1060
+ # role by registering this role with the Data Catalog. A service-linked
1061
+ # role is a unique type of IAM role that is linked directly to Lake
1062
+ # Formation.
1063
+ #
1064
+ # For more information, see [Using Service-Linked Roles for Lake
1065
+ # Formation][1].
1066
+ #
1067
+ #
1068
+ #
1069
+ # [1]: https://docs-aws.amazon.com/lake-formation/latest/dg/service-linked-roles.html
970
1070
  #
971
1071
  # @option params [String] :role_arn
972
- # The identifier for the role.
1072
+ # The identifier for the role that registers the resource.
973
1073
  #
974
1074
  # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
975
1075
  #
@@ -1013,7 +1113,7 @@ module Aws::LakeFormation
1013
1113
  #
1014
1114
  #
1015
1115
  #
1016
- # [1]: https://docs-aws.amazon.com/michigan/latest/dg/security-data-access.html
1116
+ # [1]: https://docs-aws.amazon.com/lake-formation/latest/dg/security-data-access.html
1017
1117
  #
1018
1118
  # @option params [Array<String>] :permissions_with_grant_option
1019
1119
  # Indicates a list of permissions for which to revoke the grant option
@@ -1032,26 +1132,32 @@ module Aws::LakeFormation
1032
1132
  # catalog: {
1033
1133
  # },
1034
1134
  # database: {
1135
+ # catalog_id: "CatalogIdString",
1035
1136
  # name: "NameString", # required
1036
1137
  # },
1037
1138
  # table: {
1139
+ # catalog_id: "CatalogIdString",
1038
1140
  # database_name: "NameString", # required
1039
- # name: "NameString", # required
1141
+ # name: "NameString",
1142
+ # table_wildcard: {
1143
+ # },
1040
1144
  # },
1041
1145
  # table_with_columns: {
1042
- # database_name: "NameString",
1043
- # name: "NameString",
1146
+ # catalog_id: "CatalogIdString",
1147
+ # database_name: "NameString", # required
1148
+ # name: "NameString", # required
1044
1149
  # column_names: ["NameString"],
1045
1150
  # column_wildcard: {
1046
1151
  # excluded_column_names: ["NameString"],
1047
1152
  # },
1048
1153
  # },
1049
1154
  # data_location: {
1155
+ # catalog_id: "CatalogIdString",
1050
1156
  # resource_arn: "ResourceArnString", # required
1051
1157
  # },
1052
1158
  # },
1053
- # permissions: ["ALL"], # required, accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
1054
- # permissions_with_grant_option: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
1159
+ # permissions: ["ALL"], # required, accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
1160
+ # permissions_with_grant_option: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS
1055
1161
  # })
1056
1162
  #
1057
1163
  # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/RevokePermissions AWS API Documentation
@@ -1104,7 +1210,7 @@ module Aws::LakeFormation
1104
1210
  params: params,
1105
1211
  config: config)
1106
1212
  context[:gem_name] = 'aws-sdk-lakeformation'
1107
- context[:gem_version] = '1.4.0'
1213
+ context[:gem_version] = '1.9.0'
1108
1214
  Seahorse::Client::Request.new(handlers, context)
1109
1215
  end
1110
1216