RubyGems - aws-sdk-lakeformation - Versions diffs - 1.63.0 → 1.64.0 - Mend

aws-sdk-lakeformation 1.63.0 → 1.64.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (10) hide show

checksums.yaml +4 -4
data/CHANGELOG.md +5 -0
data/VERSION +1 -1
data/lib/aws-sdk-lakeformation/client.rb +328 -37
data/lib/aws-sdk-lakeformation/client_api.rb +142 -1
data/lib/aws-sdk-lakeformation/types.rb +245 -8
data/lib/aws-sdk-lakeformation.rb +1 -1
data/sig/client.rbs +150 -24
data/sig/types.rbs +86 -12
metadata +2 -2

data/lib/aws-sdk-lakeformation/client.rb CHANGED Viewed

@@ -510,12 +510,17 @@ module Aws::LakeFormation
     #       lf_tag_policy: {
     #         catalog_id: "CatalogIdString",
     #         resource_type: "DATABASE", # required, accepts DATABASE, TABLE
-    #         expression: [ # required
+    #         expression: [
     #           {
     #             tag_key: "LFTagKey", # required
     #             tag_values: ["LFTagValue"], # required
     #           },
     #         ],
+    #         expression_name: "NameString",
+    #       },
+    #       lf_tag_expression: {
+    #         catalog_id: "CatalogIdString",
+    #         name: "NameString", # required
     #       },
     #     },
     #     lf_tags: [ # required
@@ -680,16 +685,21 @@ module Aws::LakeFormation
     #           lf_tag_policy: {
     #             catalog_id: "CatalogIdString",
     #             resource_type: "DATABASE", # required, accepts DATABASE, TABLE
-    #             expression: [ # required
+    #             expression: [
     #               {
     #                 tag_key: "LFTagKey", # required
     #                 tag_values: ["LFTagValue"], # required
     #               },
     #             ],
+    #             expression_name: "NameString",
+    #           },
+    #           lf_tag_expression: {
+    #             catalog_id: "CatalogIdString",
+    #             name: "NameString", # required
     #           },
     #         },
-    #         permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_LF_TAG, ASSOCIATE, GRANT_WITH_LF_TAG_EXPRESSION
-    #         permissions_with_grant_option: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_LF_TAG, ASSOCIATE, GRANT_WITH_LF_TAG_EXPRESSION
+    #         permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_LF_TAG, ASSOCIATE, GRANT_WITH_LF_TAG_EXPRESSION, CREATE_LF_TAG_EXPRESSION
+    #         permissions_with_grant_option: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_LF_TAG, ASSOCIATE, GRANT_WITH_LF_TAG_EXPRESSION, CREATE_LF_TAG_EXPRESSION
     #       },
     #     ],
     #   })
@@ -727,10 +737,13 @@ module Aws::LakeFormation
     #   resp.failures[0].request_entry.resource.lf_tag_policy.expression[0].tag_key #=> String
     #   resp.failures[0].request_entry.resource.lf_tag_policy.expression[0].tag_values #=> Array
     #   resp.failures[0].request_entry.resource.lf_tag_policy.expression[0].tag_values[0] #=> String
+    #   resp.failures[0].request_entry.resource.lf_tag_policy.expression_name #=> String
+    #   resp.failures[0].request_entry.resource.lf_tag_expression.catalog_id #=> String
+    #   resp.failures[0].request_entry.resource.lf_tag_expression.name #=> String
     #   resp.failures[0].request_entry.permissions #=> Array
-    #   resp.failures[0].request_entry.permissions[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "DESCRIBE", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS", "CREATE_LF_TAG", "ASSOCIATE", "GRANT_WITH_LF_TAG_EXPRESSION"
+    #   resp.failures[0].request_entry.permissions[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "DESCRIBE", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS", "CREATE_LF_TAG", "ASSOCIATE", "GRANT_WITH_LF_TAG_EXPRESSION", "CREATE_LF_TAG_EXPRESSION"
     #   resp.failures[0].request_entry.permissions_with_grant_option #=> Array
-    #   resp.failures[0].request_entry.permissions_with_grant_option[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "DESCRIBE", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS", "CREATE_LF_TAG", "ASSOCIATE", "GRANT_WITH_LF_TAG_EXPRESSION"
+    #   resp.failures[0].request_entry.permissions_with_grant_option[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "DESCRIBE", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS", "CREATE_LF_TAG", "ASSOCIATE", "GRANT_WITH_LF_TAG_EXPRESSION", "CREATE_LF_TAG_EXPRESSION"
     #   resp.failures[0].error.error_code #=> String
     #   resp.failures[0].error.error_message #=> String
     #
@@ -810,16 +823,21 @@ module Aws::LakeFormation
     #           lf_tag_policy: {
     #             catalog_id: "CatalogIdString",
     #             resource_type: "DATABASE", # required, accepts DATABASE, TABLE
-    #             expression: [ # required
+    #             expression: [
     #               {
     #                 tag_key: "LFTagKey", # required
     #                 tag_values: ["LFTagValue"], # required
     #               },
     #             ],
+    #             expression_name: "NameString",
+    #           },
+    #           lf_tag_expression: {
+    #             catalog_id: "CatalogIdString",
+    #             name: "NameString", # required
     #           },
     #         },
-    #         permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_LF_TAG, ASSOCIATE, GRANT_WITH_LF_TAG_EXPRESSION
-    #         permissions_with_grant_option: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_LF_TAG, ASSOCIATE, GRANT_WITH_LF_TAG_EXPRESSION
+    #         permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_LF_TAG, ASSOCIATE, GRANT_WITH_LF_TAG_EXPRESSION, CREATE_LF_TAG_EXPRESSION
+    #         permissions_with_grant_option: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_LF_TAG, ASSOCIATE, GRANT_WITH_LF_TAG_EXPRESSION, CREATE_LF_TAG_EXPRESSION
     #       },
     #     ],
     #   })
@@ -857,10 +875,13 @@ module Aws::LakeFormation
     #   resp.failures[0].request_entry.resource.lf_tag_policy.expression[0].tag_key #=> String
     #   resp.failures[0].request_entry.resource.lf_tag_policy.expression[0].tag_values #=> Array
     #   resp.failures[0].request_entry.resource.lf_tag_policy.expression[0].tag_values[0] #=> String
+    #   resp.failures[0].request_entry.resource.lf_tag_policy.expression_name #=> String
+    #   resp.failures[0].request_entry.resource.lf_tag_expression.catalog_id #=> String
+    #   resp.failures[0].request_entry.resource.lf_tag_expression.name #=> String
     #   resp.failures[0].request_entry.permissions #=> Array
-    #   resp.failures[0].request_entry.permissions[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "DESCRIBE", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS", "CREATE_LF_TAG", "ASSOCIATE", "GRANT_WITH_LF_TAG_EXPRESSION"
+    #   resp.failures[0].request_entry.permissions[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "DESCRIBE", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS", "CREATE_LF_TAG", "ASSOCIATE", "GRANT_WITH_LF_TAG_EXPRESSION", "CREATE_LF_TAG_EXPRESSION"
     #   resp.failures[0].request_entry.permissions_with_grant_option #=> Array
-    #   resp.failures[0].request_entry.permissions_with_grant_option[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "DESCRIBE", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS", "CREATE_LF_TAG", "ASSOCIATE", "GRANT_WITH_LF_TAG_EXPRESSION"
+    #   resp.failures[0].request_entry.permissions_with_grant_option[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "DESCRIBE", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS", "CREATE_LF_TAG", "ASSOCIATE", "GRANT_WITH_LF_TAG_EXPRESSION", "CREATE_LF_TAG_EXPRESSION"
     #   resp.failures[0].error.error_code #=> String
     #   resp.failures[0].error.error_message #=> String
     #
@@ -998,6 +1019,57 @@ module Aws::LakeFormation
       req.send_request(options)
     end
+    # Creates a new LF-Tag expression with the provided name, description,
+    # catalog ID, and expression body. This call fails if a LF-Tag
+    # expression with the same name already exists in the caller’s account
+    # or if the underlying LF-Tags don't exist. To call this API operation,
+    # caller needs the following Lake Formation permissions:
+    #
+    # `CREATE_LF_TAG_EXPRESSION` on the root catalog resource.
+    #
+    # `GRANT_WITH_LF_TAG_EXPRESSION` on all underlying LF-Tag key:value
+    # pairs included in the expression.
+    #
+    # @option params [required, String] :name
+    #   A name for the expression.
+    #
+    # @option params [String] :description
+    #   A description with information about the LF-Tag expression.
+    #
+    # @option params [String] :catalog_id
+    #   The identifier for the Data Catalog. By default, the account ID. The
+    #   Data Catalog is the persistent metadata store. It contains database
+    #   definitions, table definitions, and other control information to
+    #   manage your Lake Formation environment.
+    #
+    # @option params [required, Array<Types::LFTag>] :expression
+    #   A list of LF-Tag conditions (key-value pairs).
+    #
+    # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.create_lf_tag_expression({
+    #     name: "NameString", # required
+    #     description: "DescriptionString",
+    #     catalog_id: "CatalogIdString",
+    #     expression: [ # required
+    #       {
+    #         tag_key: "LFTagKey", # required
+    #         tag_values: ["LFTagValue"], # required
+    #       },
+    #     ],
+    #   })
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/CreateLFTagExpression AWS API Documentation
+    #
+    # @overload create_lf_tag_expression(params = {})
+    # @param [Hash] params ({})
+    def create_lf_tag_expression(params = {}, options = {})
+      req = build_request(:create_lf_tag_expression, params)
+      req.send_request(options)
+    end
     # Creates an IAM Identity Center connection with Lake Formation to allow
     # IAM Identity Center users and groups to access Data Catalog resources.
     #
@@ -1122,12 +1194,17 @@ module Aws::LakeFormation
     #       lf_tag_policy: {
     #         catalog_id: "CatalogIdString",
     #         resource_type: "DATABASE", # required, accepts DATABASE, TABLE
-    #         expression: [ # required
+    #         expression: [
     #           {
     #             tag_key: "LFTagKey", # required
     #             tag_values: ["LFTagValue"], # required
     #           },
     #         ],
+    #         expression_name: "NameString",
+    #       },
+    #       lf_tag_expression: {
+    #         catalog_id: "CatalogIdString",
+    #         name: "NameString", # required
     #       },
     #     },
     #   })
@@ -1209,6 +1286,36 @@ module Aws::LakeFormation
       req.send_request(options)
     end
+    # Deletes the LF-Tag expression. The caller must be a data lake admin or
+    # have `DROP` permissions on the LF-Tag expression. Deleting a LF-Tag
+    # expression will also delete all `LFTagPolicy` permissions referencing
+    # the LF-Tag expression.
+    #
+    # @option params [required, String] :name
+    #   The name for the LF-Tag expression.
+    #
+    # @option params [String] :catalog_id
+    #   The identifier for the Data Catalog. By default, the account ID in
+    #   which the LF-Tag expression is saved.
+    #
+    # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.delete_lf_tag_expression({
+    #     name: "NameString", # required
+    #     catalog_id: "CatalogIdString",
+    #   })
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/DeleteLFTagExpression AWS API Documentation
+    #
+    # @overload delete_lf_tag_expression(params = {})
+    # @param [Hash] params ({})
+    def delete_lf_tag_expression(params = {}, options = {})
+      req = build_request(:delete_lf_tag_expression, params)
+      req.send_request(options)
+    end
     # Deletes an IAM Identity Center connection with Lake Formation.
     #
     # @option params [String] :catalog_id
@@ -1293,12 +1400,17 @@ module Aws::LakeFormation
     #       lf_tag_policy: {
     #         catalog_id: "CatalogIdString",
     #         resource_type: "DATABASE", # required, accepts DATABASE, TABLE
-    #         expression: [ # required
+    #         expression: [
     #           {
     #             tag_key: "LFTagKey", # required
     #             tag_values: ["LFTagValue"], # required
     #           },
     #         ],
+    #         expression_name: "NameString",
+    #       },
+    #       lf_tag_expression: {
+    #         catalog_id: "CatalogIdString",
+    #         name: "NameString", # required
     #       },
     #     },
     #   })
@@ -1626,11 +1738,11 @@ module Aws::LakeFormation
     #   resp.data_lake_settings.create_database_default_permissions #=> Array
     #   resp.data_lake_settings.create_database_default_permissions[0].principal.data_lake_principal_identifier #=> String
     #   resp.data_lake_settings.create_database_default_permissions[0].permissions #=> Array
-    #   resp.data_lake_settings.create_database_default_permissions[0].permissions[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "DESCRIBE", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS", "CREATE_LF_TAG", "ASSOCIATE", "GRANT_WITH_LF_TAG_EXPRESSION"
+    #   resp.data_lake_settings.create_database_default_permissions[0].permissions[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "DESCRIBE", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS", "CREATE_LF_TAG", "ASSOCIATE", "GRANT_WITH_LF_TAG_EXPRESSION", "CREATE_LF_TAG_EXPRESSION"
     #   resp.data_lake_settings.create_table_default_permissions #=> Array
     #   resp.data_lake_settings.create_table_default_permissions[0].principal.data_lake_principal_identifier #=> String
     #   resp.data_lake_settings.create_table_default_permissions[0].permissions #=> Array
-    #   resp.data_lake_settings.create_table_default_permissions[0].permissions[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "DESCRIBE", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS", "CREATE_LF_TAG", "ASSOCIATE", "GRANT_WITH_LF_TAG_EXPRESSION"
+    #   resp.data_lake_settings.create_table_default_permissions[0].permissions[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "DESCRIBE", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS", "CREATE_LF_TAG", "ASSOCIATE", "GRANT_WITH_LF_TAG_EXPRESSION", "CREATE_LF_TAG_EXPRESSION"
     #   resp.data_lake_settings.parameters #=> Hash
     #   resp.data_lake_settings.parameters["KeyString"] #=> String
     #   resp.data_lake_settings.trusted_resource_owners #=> Array
@@ -1721,10 +1833,13 @@ module Aws::LakeFormation
     #   resp.permissions[0].resource.lf_tag_policy.expression[0].tag_key #=> String
     #   resp.permissions[0].resource.lf_tag_policy.expression[0].tag_values #=> Array
     #   resp.permissions[0].resource.lf_tag_policy.expression[0].tag_values[0] #=> String
+    #   resp.permissions[0].resource.lf_tag_policy.expression_name #=> String
+    #   resp.permissions[0].resource.lf_tag_expression.catalog_id #=> String
+    #   resp.permissions[0].resource.lf_tag_expression.name #=> String
     #   resp.permissions[0].permissions #=> Array
-    #   resp.permissions[0].permissions[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "DESCRIBE", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS", "CREATE_LF_TAG", "ASSOCIATE", "GRANT_WITH_LF_TAG_EXPRESSION"
+    #   resp.permissions[0].permissions[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "DESCRIBE", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS", "CREATE_LF_TAG", "ASSOCIATE", "GRANT_WITH_LF_TAG_EXPRESSION", "CREATE_LF_TAG_EXPRESSION"
     #   resp.permissions[0].permissions_with_grant_option #=> Array
-    #   resp.permissions[0].permissions_with_grant_option[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "DESCRIBE", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS", "CREATE_LF_TAG", "ASSOCIATE", "GRANT_WITH_LF_TAG_EXPRESSION"
+    #   resp.permissions[0].permissions_with_grant_option[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "DESCRIBE", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS", "CREATE_LF_TAG", "ASSOCIATE", "GRANT_WITH_LF_TAG_EXPRESSION", "CREATE_LF_TAG_EXPRESSION"
     #   resp.permissions[0].additional_details.resource_share #=> Array
     #   resp.permissions[0].additional_details.resource_share[0] #=> String
     #   resp.permissions[0].last_updated #=> Time
@@ -1780,6 +1895,49 @@ module Aws::LakeFormation
       req.send_request(options)
     end
+    # Returns the details about the LF-Tag expression. The caller must be a
+    # data lake admin or must have `DESCRIBE` permission on the LF-Tag
+    # expression resource.
+    #
+    # @option params [required, String] :name
+    #   The name for the LF-Tag expression
+    #
+    # @option params [String] :catalog_id
+    #   The identifier for the Data Catalog. By default, the account ID.
+    #
+    # @return [Types::GetLFTagExpressionResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::GetLFTagExpressionResponse#name #name} => String
+    #   * {Types::GetLFTagExpressionResponse#description #description} => String
+    #   * {Types::GetLFTagExpressionResponse#catalog_id #catalog_id} => String
+    #   * {Types::GetLFTagExpressionResponse#expression #expression} => Array&lt;Types::LFTag&gt;
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.get_lf_tag_expression({
+    #     name: "NameString", # required
+    #     catalog_id: "CatalogIdString",
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.name #=> String
+    #   resp.description #=> String
+    #   resp.catalog_id #=> String
+    #   resp.expression #=> Array
+    #   resp.expression[0].tag_key #=> String
+    #   resp.expression[0].tag_values #=> Array
+    #   resp.expression[0].tag_values[0] #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/GetLFTagExpression AWS API Documentation
+    #
+    # @overload get_lf_tag_expression(params = {})
+    # @param [Hash] params ({})
+    def get_lf_tag_expression(params = {}, options = {})
+      req = build_request(:get_lf_tag_expression, params)
+      req.send_request(options)
+    end
     # Returns the state of a query previously submitted. Clients are
     # expected to poll `GetQueryState` to monitor the current state of the
     # planning before retrieving the work units. A query state is only
@@ -1917,12 +2075,17 @@ module Aws::LakeFormation
     #       lf_tag_policy: {
     #         catalog_id: "CatalogIdString",
     #         resource_type: "DATABASE", # required, accepts DATABASE, TABLE
-    #         expression: [ # required
+    #         expression: [
     #           {
     #             tag_key: "LFTagKey", # required
     #             tag_values: ["LFTagValue"], # required
     #           },
     #         ],
+    #         expression_name: "NameString",
+    #       },
+    #       lf_tag_expression: {
+    #         catalog_id: "CatalogIdString",
+    #         name: "NameString", # required
     #       },
     #     },
     #     show_assigned_lf_tags: false,
@@ -2083,7 +2246,7 @@ module Aws::LakeFormation
     #     partition: { # required
     #       values: ["ValueString"], # required
     #     },
-    #     permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_LF_TAG, ASSOCIATE, GRANT_WITH_LF_TAG_EXPRESSION
+    #     permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_LF_TAG, ASSOCIATE, GRANT_WITH_LF_TAG_EXPRESSION, CREATE_LF_TAG_EXPRESSION
     #     duration_seconds: 1,
     #     audit_context: {
     #       additional_audit_context: "AuditContextString",
@@ -2113,6 +2276,9 @@ module Aws::LakeFormation
     # for example an Amazon S3 bucket, with a scope down policy which
     # restricts the access to a single prefix.
     #
+    # To call this API, the role that the service assumes must have
+    # `lakeformation:GetDataAccess` permission on the resource.
+    #
     # @option params [required, String] :table_arn
     #   The ARN identifying a table in the Data Catalog for the temporary
     #   credentials request.
@@ -2154,7 +2320,7 @@ module Aws::LakeFormation
     #
     #   resp = client.get_temporary_glue_table_credentials({
     #     table_arn: "ResourceArnString", # required
-    #     permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_LF_TAG, ASSOCIATE, GRANT_WITH_LF_TAG_EXPRESSION
+    #     permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_LF_TAG, ASSOCIATE, GRANT_WITH_LF_TAG_EXPRESSION, CREATE_LF_TAG_EXPRESSION
     #     duration_seconds: 1,
     #     audit_context: {
     #       additional_audit_context: "AuditContextString",
@@ -2373,16 +2539,21 @@ module Aws::LakeFormation
     #       lf_tag_policy: {
     #         catalog_id: "CatalogIdString",
     #         resource_type: "DATABASE", # required, accepts DATABASE, TABLE
-    #         expression: [ # required
+    #         expression: [
     #           {
     #             tag_key: "LFTagKey", # required
     #             tag_values: ["LFTagValue"], # required
     #           },
     #         ],
+    #         expression_name: "NameString",
+    #       },
+    #       lf_tag_expression: {
+    #         catalog_id: "CatalogIdString",
+    #         name: "NameString", # required
     #       },
     #     },
-    #     permissions: ["ALL"], # required, accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_LF_TAG, ASSOCIATE, GRANT_WITH_LF_TAG_EXPRESSION
-    #     permissions_with_grant_option: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_LF_TAG, ASSOCIATE, GRANT_WITH_LF_TAG_EXPRESSION
+    #     permissions: ["ALL"], # required, accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_LF_TAG, ASSOCIATE, GRANT_WITH_LF_TAG_EXPRESSION, CREATE_LF_TAG_EXPRESSION
+    #     permissions_with_grant_option: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_LF_TAG, ASSOCIATE, GRANT_WITH_LF_TAG_EXPRESSION, CREATE_LF_TAG_EXPRESSION
     #   })
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/GrantPermissions AWS API Documentation
@@ -2450,6 +2621,57 @@ module Aws::LakeFormation
       req.send_request(options)
     end
+    # Returns the LF-Tag expressions in caller’s account filtered based on
+    # caller's permissions. Data Lake and read only admins implicitly can
+    # see all tag expressions in their account, else caller needs DESCRIBE
+    # permissions on tag expression.
+    #
+    # @option params [String] :catalog_id
+    #   The identifier for the Data Catalog. By default, the account ID.
+    #
+    # @option params [Integer] :max_results
+    #   The maximum number of results to return.
+    #
+    # @option params [String] :next_token
+    #   A continuation token, if this is not the first call to retrieve this
+    #   list.
+    #
+    # @return [Types::ListLFTagExpressionsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::ListLFTagExpressionsResponse#lf_tag_expressions #lf_tag_expressions} => Array&lt;Types::LFTagExpression&gt;
+    #   * {Types::ListLFTagExpressionsResponse#next_token #next_token} => String
+    #
+    # The returned {Seahorse::Client::Response response} is a pageable response and is Enumerable. For details on usage see {Aws::PageableResponse PageableResponse}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.list_lf_tag_expressions({
+    #     catalog_id: "CatalogIdString",
+    #     max_results: 1,
+    #     next_token: "Token",
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.lf_tag_expressions #=> Array
+    #   resp.lf_tag_expressions[0].name #=> String
+    #   resp.lf_tag_expressions[0].description #=> String
+    #   resp.lf_tag_expressions[0].catalog_id #=> String
+    #   resp.lf_tag_expressions[0].expression #=> Array
+    #   resp.lf_tag_expressions[0].expression[0].tag_key #=> String
+    #   resp.lf_tag_expressions[0].expression[0].tag_values #=> Array
+    #   resp.lf_tag_expressions[0].expression[0].tag_values[0] #=> String
+    #   resp.next_token #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/ListLFTagExpressions AWS API Documentation
+    #
+    # @overload list_lf_tag_expressions(params = {})
+    # @param [Hash] params ({})
+    def list_lf_tag_expressions(params = {}, options = {})
+      req = build_request(:list_lf_tag_expressions, params)
+      req.send_request(options)
+    end
     # Lists LF-tags that the requester has permission to view.
     #
     # @option params [String] :catalog_id
@@ -2577,12 +2799,17 @@ module Aws::LakeFormation
     #       lf_tag_policy: {
     #         catalog_id: "CatalogIdString",
     #         resource_type: "DATABASE", # required, accepts DATABASE, TABLE
-    #         expression: [ # required
+    #         expression: [
     #           {
     #             tag_key: "LFTagKey", # required
     #             tag_values: ["LFTagValue"], # required
     #           },
     #         ],
+    #         expression_name: "NameString",
+    #       },
+    #       lf_tag_expression: {
+    #         catalog_id: "CatalogIdString",
+    #         name: "NameString", # required
     #       },
     #     },
     #     max_results: 1,
@@ -2620,6 +2847,9 @@ module Aws::LakeFormation
     #   resp.lake_formation_opt_ins_info_list[0].resource.lf_tag_policy.expression[0].tag_key #=> String
     #   resp.lake_formation_opt_ins_info_list[0].resource.lf_tag_policy.expression[0].tag_values #=> Array
     #   resp.lake_formation_opt_ins_info_list[0].resource.lf_tag_policy.expression[0].tag_values[0] #=> String
+    #   resp.lake_formation_opt_ins_info_list[0].resource.lf_tag_policy.expression_name #=> String
+    #   resp.lake_formation_opt_ins_info_list[0].resource.lf_tag_expression.catalog_id #=> String
+    #   resp.lake_formation_opt_ins_info_list[0].resource.lf_tag_expression.name #=> String
     #   resp.lake_formation_opt_ins_info_list[0].principal.data_lake_principal_identifier #=> String
     #   resp.lake_formation_opt_ins_info_list[0].last_modified #=> Time
     #   resp.lake_formation_opt_ins_info_list[0].last_updated_by #=> String
@@ -2692,7 +2922,7 @@ module Aws::LakeFormation
     #     principal: {
     #       data_lake_principal_identifier: "DataLakePrincipalString",
     #     },
-    #     resource_type: "CATALOG", # accepts CATALOG, DATABASE, TABLE, DATA_LOCATION, LF_TAG, LF_TAG_POLICY, LF_TAG_POLICY_DATABASE, LF_TAG_POLICY_TABLE
+    #     resource_type: "CATALOG", # accepts CATALOG, DATABASE, TABLE, DATA_LOCATION, LF_TAG, LF_TAG_POLICY, LF_TAG_POLICY_DATABASE, LF_TAG_POLICY_TABLE, LF_NAMED_TAG_EXPRESSION
     #     resource: {
     #       catalog: {
     #       },
@@ -2734,12 +2964,17 @@ module Aws::LakeFormation
     #       lf_tag_policy: {
     #         catalog_id: "CatalogIdString",
     #         resource_type: "DATABASE", # required, accepts DATABASE, TABLE
-    #         expression: [ # required
+    #         expression: [
     #           {
     #             tag_key: "LFTagKey", # required
     #             tag_values: ["LFTagValue"], # required
     #           },
     #         ],
+    #         expression_name: "NameString",
+    #       },
+    #       lf_tag_expression: {
+    #         catalog_id: "CatalogIdString",
+    #         name: "NameString", # required
     #       },
     #     },
     #     next_token: "Token",
@@ -2779,10 +3014,13 @@ module Aws::LakeFormation
     #   resp.principal_resource_permissions[0].resource.lf_tag_policy.expression[0].tag_key #=> String
     #   resp.principal_resource_permissions[0].resource.lf_tag_policy.expression[0].tag_values #=> Array
     #   resp.principal_resource_permissions[0].resource.lf_tag_policy.expression[0].tag_values[0] #=> String
+    #   resp.principal_resource_permissions[0].resource.lf_tag_policy.expression_name #=> String
+    #   resp.principal_resource_permissions[0].resource.lf_tag_expression.catalog_id #=> String
+    #   resp.principal_resource_permissions[0].resource.lf_tag_expression.name #=> String
     #   resp.principal_resource_permissions[0].permissions #=> Array
-    #   resp.principal_resource_permissions[0].permissions[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "DESCRIBE", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS", "CREATE_LF_TAG", "ASSOCIATE", "GRANT_WITH_LF_TAG_EXPRESSION"
+    #   resp.principal_resource_permissions[0].permissions[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "DESCRIBE", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS", "CREATE_LF_TAG", "ASSOCIATE", "GRANT_WITH_LF_TAG_EXPRESSION", "CREATE_LF_TAG_EXPRESSION"
     #   resp.principal_resource_permissions[0].permissions_with_grant_option #=> Array
-    #   resp.principal_resource_permissions[0].permissions_with_grant_option[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "DESCRIBE", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS", "CREATE_LF_TAG", "ASSOCIATE", "GRANT_WITH_LF_TAG_EXPRESSION"
+    #   resp.principal_resource_permissions[0].permissions_with_grant_option[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "DESCRIBE", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS", "CREATE_LF_TAG", "ASSOCIATE", "GRANT_WITH_LF_TAG_EXPRESSION", "CREATE_LF_TAG_EXPRESSION"
     #   resp.principal_resource_permissions[0].additional_details.resource_share #=> Array
     #   resp.principal_resource_permissions[0].additional_details.resource_share[0] #=> String
     #   resp.principal_resource_permissions[0].last_updated #=> Time
@@ -3012,7 +3250,7 @@ module Aws::LakeFormation
     #           principal: {
     #             data_lake_principal_identifier: "DataLakePrincipalString",
     #           },
-    #           permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_LF_TAG, ASSOCIATE, GRANT_WITH_LF_TAG_EXPRESSION
+    #           permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_LF_TAG, ASSOCIATE, GRANT_WITH_LF_TAG_EXPRESSION, CREATE_LF_TAG_EXPRESSION
     #         },
     #       ],
     #       create_table_default_permissions: [
@@ -3020,7 +3258,7 @@ module Aws::LakeFormation
     #           principal: {
     #             data_lake_principal_identifier: "DataLakePrincipalString",
     #           },
-    #           permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_LF_TAG, ASSOCIATE, GRANT_WITH_LF_TAG_EXPRESSION
+    #           permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_LF_TAG, ASSOCIATE, GRANT_WITH_LF_TAG_EXPRESSION, CREATE_LF_TAG_EXPRESSION
     #         },
     #       ],
     #       parameters: {
@@ -3062,7 +3300,7 @@ module Aws::LakeFormation
     # Formation permission to use the service-linked role to access that
     # location.
     #
-    # `ResourceArn = arn:aws:s3:::my-bucket UseServiceLinkedRole = true`
+    # `ResourceArn = arn:aws:s3:::my-bucket/ UseServiceLinkedRole = true`
     #
     # If `UseServiceLinkedRole` is not set to true, you must provide or set
     # the `RoleArn`:
@@ -3184,12 +3422,17 @@ module Aws::LakeFormation
     #       lf_tag_policy: {
     #         catalog_id: "CatalogIdString",
     #         resource_type: "DATABASE", # required, accepts DATABASE, TABLE
-    #         expression: [ # required
+    #         expression: [
     #           {
     #             tag_key: "LFTagKey", # required
     #             tag_values: ["LFTagValue"], # required
     #           },
     #         ],
+    #         expression_name: "NameString",
+    #       },
+    #       lf_tag_expression: {
+    #         catalog_id: "CatalogIdString",
+    #         name: "NameString", # required
     #       },
     #     },
     #     lf_tags: [ # required
@@ -3299,16 +3542,21 @@ module Aws::LakeFormation
     #       lf_tag_policy: {
     #         catalog_id: "CatalogIdString",
     #         resource_type: "DATABASE", # required, accepts DATABASE, TABLE
-    #         expression: [ # required
+    #         expression: [
     #           {
     #             tag_key: "LFTagKey", # required
     #             tag_values: ["LFTagValue"], # required
     #           },
     #         ],
+    #         expression_name: "NameString",
+    #       },
+    #       lf_tag_expression: {
+    #         catalog_id: "CatalogIdString",
+    #         name: "NameString", # required
     #       },
     #     },
-    #     permissions: ["ALL"], # required, accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_LF_TAG, ASSOCIATE, GRANT_WITH_LF_TAG_EXPRESSION
-    #     permissions_with_grant_option: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_LF_TAG, ASSOCIATE, GRANT_WITH_LF_TAG_EXPRESSION
+    #     permissions: ["ALL"], # required, accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_LF_TAG, ASSOCIATE, GRANT_WITH_LF_TAG_EXPRESSION, CREATE_LF_TAG_EXPRESSION
+    #     permissions_with_grant_option: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_LF_TAG, ASSOCIATE, GRANT_WITH_LF_TAG_EXPRESSION, CREATE_LF_TAG_EXPRESSION
     #   })
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/RevokePermissions AWS API Documentation
@@ -3620,6 +3868,49 @@ module Aws::LakeFormation
       req.send_request(options)
     end
+    # Updates the name of the LF-Tag expression to the new description and
+    # expression body provided. Updating a LF-Tag expression immediately
+    # changes the permission boundaries of all existing `LFTagPolicy`
+    # permission grants that reference the given LF-Tag expression.
+    #
+    # @option params [required, String] :name
+    #   The name for the LF-Tag expression.
+    #
+    # @option params [String] :description
+    #   The description with information about the saved LF-Tag expression.
+    #
+    # @option params [String] :catalog_id
+    #   The identifier for the Data Catalog. By default, the account ID.
+    #
+    # @option params [required, Array<Types::LFTag>] :expression
+    #   The LF-Tag expression body composed of one more LF-Tag key-value
+    #   pairs.
+    #
+    # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.update_lf_tag_expression({
+    #     name: "NameString", # required
+    #     description: "DescriptionString",
+    #     catalog_id: "CatalogIdString",
+    #     expression: [ # required
+    #       {
+    #         tag_key: "LFTagKey", # required
+    #         tag_values: ["LFTagValue"], # required
+    #       },
+    #     ],
+    #   })
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/UpdateLFTagExpression AWS API Documentation
+    #
+    # @overload update_lf_tag_expression(params = {})
+    # @param [Hash] params ({})
+    def update_lf_tag_expression(params = {}, options = {})
+      req = build_request(:update_lf_tag_expression, params)
+      req.send_request(options)
+    end
     # Updates the IAM Identity Center connection parameters.
     #
     # @option params [String] :catalog_id
@@ -3784,7 +4075,7 @@ module Aws::LakeFormation
     #   Name of the table for which to enable the storage optimizer.
     #
     # @option params [required, Hash<String,Hash>] :storage_optimizer_config
-    #   Name of the table for which to enable the storage optimizer.
+    #   Name of the configuration for the storage optimizer.
     #
     # @return [Types::UpdateTableStorageOptimizerResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -3834,7 +4125,7 @@ module Aws::LakeFormation
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-lakeformation'
-      context[:gem_version] = '1.63.0'
+      context[:gem_version] = '1.64.0'
       Seahorse::Client::Request.new(handlers, context)
     end