aws-sdk-lakeformation 1.68.0 → 1.69.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 532e3feab3b577e73269e75af4520b5658ab477cc46303e42a2b3360b9c9d4bf
-  data.tar.gz: 9cf8eaeb85c31ae3ab9e2907392219c7d8de4bcdc833d3e82da90201dc0c41a8
+  metadata.gz: e02eb810d89271f9836351a6766edb04585a681719a512c45945b3d97f977dd5
+  data.tar.gz: 547a8c56e3cd453d0cbef5023641825907f1712f92d04a65d4d2c85034cc3729
 SHA512:
-  metadata.gz: a1f169b0365e11600dccb0e39fc0247c1f30da1311afe87e0b245c6f4cc7479504698d4da18e4401a7cf1af2928853de1451c749c632ac82b168a012c5ab06fe
-  data.tar.gz: 865bde310a2c51b5b29dd2297cd081aa20624f94902ce908a1cd0c945c80ff11df19fb0a19c61dfc58588d2324e9b3486a90a876641d5eb9391b66a95acd4482
+  metadata.gz: bdd4efeb46674992ab412a9c08ab75a621b3a5af59ce90d5be0a3f45ec782d53088df0be0d6a02a3f2bd7be7aef2a0b035d1ecc41e8f7c90d3b14acf841b304b
+  data.tar.gz: de4bd2e4796cee2182ccb31faf56262138e899a921c5b75f863bebed2e12ae58bb4d9c7cff46064f71cb25a2c907771c8beb2d67ed069c26ec177de447e9f4ae

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.69.0 (2025-03-14)
+------------------
+
+* Feature - This release added "condition" to LakeFormation OptIn APIs, also added WithPrivilegedAccess flag to RegisterResource and DescribeResource.
+
 1.68.0 (2025-02-18)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.68.0
+1.69.0

data/lib/aws-sdk-lakeformation/client.rb

@@ -724,6 +724,9 @@ module Aws::LakeFormation
     #           },
     #         },
     #         permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_LF_TAG, ASSOCIATE, GRANT_WITH_LF_TAG_EXPRESSION, CREATE_LF_TAG_EXPRESSION, CREATE_CATALOG, SUPER_USER
+    #         condition: {
+    #           expression: "ExpressionString",
+    #         },
     #         permissions_with_grant_option: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_LF_TAG, ASSOCIATE, GRANT_WITH_LF_TAG_EXPRESSION, CREATE_LF_TAG_EXPRESSION, CREATE_CATALOG, SUPER_USER
     #       },
     #     ],
@@ -768,6 +771,7 @@ module Aws::LakeFormation
     #   resp.failures[0].request_entry.resource.lf_tag_expression.name #=> String
     #   resp.failures[0].request_entry.permissions #=> Array
     #   resp.failures[0].request_entry.permissions[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "DESCRIBE", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS", "CREATE_LF_TAG", "ASSOCIATE", "GRANT_WITH_LF_TAG_EXPRESSION", "CREATE_LF_TAG_EXPRESSION", "CREATE_CATALOG", "SUPER_USER"
+    #   resp.failures[0].request_entry.condition.expression #=> String
     #   resp.failures[0].request_entry.permissions_with_grant_option #=> Array
     #   resp.failures[0].request_entry.permissions_with_grant_option[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "DESCRIBE", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS", "CREATE_LF_TAG", "ASSOCIATE", "GRANT_WITH_LF_TAG_EXPRESSION", "CREATE_LF_TAG_EXPRESSION", "CREATE_CATALOG", "SUPER_USER"
     #   resp.failures[0].error.error_code #=> String
@@ -864,6 +868,9 @@ module Aws::LakeFormation
     #           },
     #         },
     #         permissions: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_LF_TAG, ASSOCIATE, GRANT_WITH_LF_TAG_EXPRESSION, CREATE_LF_TAG_EXPRESSION, CREATE_CATALOG, SUPER_USER
+    #         condition: {
+    #           expression: "ExpressionString",
+    #         },
     #         permissions_with_grant_option: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_LF_TAG, ASSOCIATE, GRANT_WITH_LF_TAG_EXPRESSION, CREATE_LF_TAG_EXPRESSION, CREATE_CATALOG, SUPER_USER
     #       },
     #     ],
@@ -908,6 +915,7 @@ module Aws::LakeFormation
     #   resp.failures[0].request_entry.resource.lf_tag_expression.name #=> String
     #   resp.failures[0].request_entry.permissions #=> Array
     #   resp.failures[0].request_entry.permissions[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "DESCRIBE", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS", "CREATE_LF_TAG", "ASSOCIATE", "GRANT_WITH_LF_TAG_EXPRESSION", "CREATE_LF_TAG_EXPRESSION", "CREATE_CATALOG", "SUPER_USER"
+    #   resp.failures[0].request_entry.condition.expression #=> String
     #   resp.failures[0].request_entry.permissions_with_grant_option #=> Array
     #   resp.failures[0].request_entry.permissions_with_grant_option[0] #=> String, one of "ALL", "SELECT", "ALTER", "DROP", "DELETE", "INSERT", "DESCRIBE", "CREATE_DATABASE", "CREATE_TABLE", "DATA_LOCATION_ACCESS", "CREATE_LF_TAG", "ASSOCIATE", "GRANT_WITH_LF_TAG_EXPRESSION", "CREATE_LF_TAG_EXPRESSION", "CREATE_CATALOG", "SUPER_USER"
     #   resp.failures[0].error.error_code #=> String
@@ -1173,6 +1181,10 @@ module Aws::LakeFormation
     # @option params [required, Types::Resource] :resource
     #   A structure for the resource.
     #
+    # @option params [Types::Condition] :condition
+    #   A Lake Formation condition, which applies to permissions and opt-ins
+    #   that contain an expression.
+    #
     # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
     #
     # @example Request syntax with placeholder values
@@ -1236,6 +1248,9 @@ module Aws::LakeFormation
     #         name: "NameString", # required
     #       },
     #     },
+    #     condition: {
+    #       expression: "ExpressionString",
+    #     },
     #   })
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/CreateLakeFormationOptIn AWS API Documentation
@@ -1380,6 +1395,10 @@ module Aws::LakeFormation
     # @option params [required, Types::Resource] :resource
     #   A structure for the resource.
     #
+    # @option params [Types::Condition] :condition
+    #   A Lake Formation condition, which applies to permissions and opt-ins
+    #   that contain an expression.
+    #
     # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
     #
     # @example Request syntax with placeholder values
@@ -1443,6 +1462,9 @@ module Aws::LakeFormation
     #         name: "NameString", # required
     #       },
     #     },
+    #     condition: {
+    #       expression: "ExpressionString",
+    #     },
     #   })
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/DeleteLakeFormationOptIn AWS API Documentation
@@ -1605,6 +1627,7 @@ module Aws::LakeFormation
     #   resp.resource_info.last_modified #=> Time
     #   resp.resource_info.with_federation #=> Boolean
     #   resp.resource_info.hybrid_access_enabled #=> Boolean
+    #   resp.resource_info.with_privileged_access #=> Boolean
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/DescribeResource AWS API Documentation
     #
@@ -2517,6 +2540,10 @@ module Aws::LakeFormation
     #   Amazon S3. Lake Formation requires that each principal be authorized
     #   to perform a specific task on Lake Formation resources.
     #
+    # @option params [Types::Condition] :condition
+    #   A Lake Formation condition, which applies to permissions and opt-ins
+    #   that contain an expression.
+    #
     # @option params [Array<String>] :permissions_with_grant_option
     #   Indicates a list of the granted permissions that the principal may
     #   pass to other users. These permissions may only be a subset of the
@@ -2587,6 +2614,9 @@ module Aws::LakeFormation
     #       },
     #     },
     #     permissions: ["ALL"], # required, accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_LF_TAG, ASSOCIATE, GRANT_WITH_LF_TAG_EXPRESSION, CREATE_LF_TAG_EXPRESSION, CREATE_CATALOG, SUPER_USER
+    #     condition: {
+    #       expression: "ExpressionString",
+    #     },
     #     permissions_with_grant_option: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_LF_TAG, ASSOCIATE, GRANT_WITH_LF_TAG_EXPRESSION, CREATE_LF_TAG_EXPRESSION, CREATE_CATALOG, SUPER_USER
     #   })
     #
@@ -3118,6 +3148,7 @@ module Aws::LakeFormation
     #   resp.resource_info_list[0].last_modified #=> Time
     #   resp.resource_info_list[0].with_federation #=> Boolean
     #   resp.resource_info_list[0].hybrid_access_enabled #=> Boolean
+    #   resp.resource_info_list[0].with_privileged_access #=> Boolean
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/ListResources AWS API Documentation
@@ -3328,8 +3359,8 @@ module Aws::LakeFormation
     # Registers the resource as managed by the Data Catalog.
     #
     # To add or update data, Lake Formation needs read/write access to the
-    # chosen Amazon S3 path. Choose a role that you know has permission to
-    # do this, or choose the AWSServiceRoleForLakeFormationDataAccess
+    # chosen data location. Choose a role that you know has permission to do
+    # this, or choose the AWSServiceRoleForLakeFormationDataAccess
     # service-linked role. When you register the first Amazon S3 path, the
     # service-linked role and a new inline policy are created on your
     # behalf. Lake Formation adds the first path to the inline policy and
@@ -3375,6 +3406,10 @@ module Aws::LakeFormation
     #   can be managed by both Lake Formation permissions as well as Amazon S3
     #   bucket policies.
     #
+    # @option params [Boolean] :with_privileged_access
+    #   Grants the calling principal the permissions to perform all supported
+    #   Lake Formation operations on the registered data location.
+    #
     # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
     #
     # @example Request syntax with placeholder values
@@ -3385,6 +3420,7 @@ module Aws::LakeFormation
     #     role_arn: "IAMRoleArn",
     #     with_federation: false,
     #     hybrid_access_enabled: false,
+    #     with_privileged_access: false,
     #   })
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/RegisterResource AWS API Documentation
@@ -3529,6 +3565,10 @@ module Aws::LakeFormation
     #
     #   [1]: https://docs.aws.amazon.com/lake-formation/latest/dg/security-data-access.html
     #
+    # @option params [Types::Condition] :condition
+    #   A Lake Formation condition, which applies to permissions and opt-ins
+    #   that contain an expression.
+    #
     # @option params [Array<String>] :permissions_with_grant_option
     #   Indicates a list of permissions for which to revoke the grant option
     #   allowing the principal to pass permissions to other principals.
@@ -3598,6 +3638,9 @@ module Aws::LakeFormation
     #       },
     #     },
     #     permissions: ["ALL"], # required, accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_LF_TAG, ASSOCIATE, GRANT_WITH_LF_TAG_EXPRESSION, CREATE_LF_TAG_EXPRESSION, CREATE_CATALOG, SUPER_USER
+    #     condition: {
+    #       expression: "ExpressionString",
+    #     },
     #     permissions_with_grant_option: ["ALL"], # accepts ALL, SELECT, ALTER, DROP, DELETE, INSERT, DESCRIBE, CREATE_DATABASE, CREATE_TABLE, DATA_LOCATION_ACCESS, CREATE_LF_TAG, ASSOCIATE, GRANT_WITH_LF_TAG_EXPRESSION, CREATE_LF_TAG_EXPRESSION, CREATE_CATALOG, SUPER_USER
     #   })
     #
@@ -4167,7 +4210,7 @@ module Aws::LakeFormation
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-lakeformation'
-      context[:gem_version] = '1.68.0'
+      context[:gem_version] = '1.69.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-lakeformation/client_api.rb

@@ -37,6 +37,7 @@ module Aws::LakeFormation
     BatchPermissionsRequestEntryList = Shapes::ListShape.new(name: 'BatchPermissionsRequestEntryList')
     BatchRevokePermissionsRequest = Shapes::StructureShape.new(name: 'BatchRevokePermissionsRequest')
     BatchRevokePermissionsResponse = Shapes::StructureShape.new(name: 'BatchRevokePermissionsResponse')
+    Boolean = Shapes::BooleanShape.new(name: 'Boolean')
     BooleanNullable = Shapes::BooleanShape.new(name: 'BooleanNullable')
     CancelTransactionRequest = Shapes::StructureShape.new(name: 'CancelTransactionRequest')
     CancelTransactionResponse = Shapes::StructureShape.new(name: 'CancelTransactionResponse')
@@ -387,6 +388,7 @@ module Aws::LakeFormation
     BatchPermissionsRequestEntry.add_member(:principal, Shapes::ShapeRef.new(shape: DataLakePrincipal, location_name: "Principal"))
     BatchPermissionsRequestEntry.add_member(:resource, Shapes::ShapeRef.new(shape: Resource, location_name: "Resource"))
     BatchPermissionsRequestEntry.add_member(:permissions, Shapes::ShapeRef.new(shape: PermissionList, location_name: "Permissions"))
+    BatchPermissionsRequestEntry.add_member(:condition, Shapes::ShapeRef.new(shape: Condition, location_name: "Condition"))
     BatchPermissionsRequestEntry.add_member(:permissions_with_grant_option, Shapes::ShapeRef.new(shape: PermissionList, location_name: "PermissionsWithGrantOption"))
     BatchPermissionsRequestEntry.struct_class = Types::BatchPermissionsRequestEntry
 
@@ -461,6 +463,7 @@ module Aws::LakeFormation
 
     CreateLakeFormationOptInRequest.add_member(:principal, Shapes::ShapeRef.new(shape: DataLakePrincipal, required: true, location_name: "Principal"))
     CreateLakeFormationOptInRequest.add_member(:resource, Shapes::ShapeRef.new(shape: Resource, required: true, location_name: "Resource"))
+    CreateLakeFormationOptInRequest.add_member(:condition, Shapes::ShapeRef.new(shape: Condition, location_name: "Condition"))
     CreateLakeFormationOptInRequest.struct_class = Types::CreateLakeFormationOptInRequest
 
     CreateLakeFormationOptInResponse.struct_class = Types::CreateLakeFormationOptInResponse
@@ -537,6 +540,7 @@ module Aws::LakeFormation
 
     DeleteLakeFormationOptInRequest.add_member(:principal, Shapes::ShapeRef.new(shape: DataLakePrincipal, required: true, location_name: "Principal"))
     DeleteLakeFormationOptInRequest.add_member(:resource, Shapes::ShapeRef.new(shape: Resource, required: true, location_name: "Resource"))
+    DeleteLakeFormationOptInRequest.add_member(:condition, Shapes::ShapeRef.new(shape: Condition, location_name: "Condition"))
     DeleteLakeFormationOptInRequest.struct_class = Types::DeleteLakeFormationOptInRequest
 
     DeleteLakeFormationOptInResponse.struct_class = Types::DeleteLakeFormationOptInResponse
@@ -764,6 +768,7 @@ module Aws::LakeFormation
     GrantPermissionsRequest.add_member(:principal, Shapes::ShapeRef.new(shape: DataLakePrincipal, required: true, location_name: "Principal"))
     GrantPermissionsRequest.add_member(:resource, Shapes::ShapeRef.new(shape: Resource, required: true, location_name: "Resource"))
     GrantPermissionsRequest.add_member(:permissions, Shapes::ShapeRef.new(shape: PermissionList, required: true, location_name: "Permissions"))
+    GrantPermissionsRequest.add_member(:condition, Shapes::ShapeRef.new(shape: Condition, location_name: "Condition"))
     GrantPermissionsRequest.add_member(:permissions_with_grant_option, Shapes::ShapeRef.new(shape: PermissionList, location_name: "PermissionsWithGrantOption"))
     GrantPermissionsRequest.struct_class = Types::GrantPermissionsRequest
 
@@ -984,6 +989,7 @@ module Aws::LakeFormation
     RegisterResourceRequest.add_member(:role_arn, Shapes::ShapeRef.new(shape: IAMRoleArn, location_name: "RoleArn"))
     RegisterResourceRequest.add_member(:with_federation, Shapes::ShapeRef.new(shape: NullableBoolean, location_name: "WithFederation"))
     RegisterResourceRequest.add_member(:hybrid_access_enabled, Shapes::ShapeRef.new(shape: NullableBoolean, location_name: "HybridAccessEnabled"))
+    RegisterResourceRequest.add_member(:with_privileged_access, Shapes::ShapeRef.new(shape: Boolean, location_name: "WithPrivilegedAccess"))
     RegisterResourceRequest.struct_class = Types::RegisterResourceRequest
 
     RegisterResourceResponse.struct_class = Types::RegisterResourceResponse
@@ -1012,6 +1018,7 @@ module Aws::LakeFormation
     ResourceInfo.add_member(:last_modified, Shapes::ShapeRef.new(shape: LastModifiedTimestamp, location_name: "LastModified"))
     ResourceInfo.add_member(:with_federation, Shapes::ShapeRef.new(shape: NullableBoolean, location_name: "WithFederation"))
     ResourceInfo.add_member(:hybrid_access_enabled, Shapes::ShapeRef.new(shape: NullableBoolean, location_name: "HybridAccessEnabled"))
+    ResourceInfo.add_member(:with_privileged_access, Shapes::ShapeRef.new(shape: NullableBoolean, location_name: "WithPrivilegedAccess"))
     ResourceInfo.struct_class = Types::ResourceInfo
 
     ResourceInfoList.member = Shapes::ShapeRef.new(shape: ResourceInfo)
@@ -1028,6 +1035,7 @@ module Aws::LakeFormation
     RevokePermissionsRequest.add_member(:principal, Shapes::ShapeRef.new(shape: DataLakePrincipal, required: true, location_name: "Principal"))
     RevokePermissionsRequest.add_member(:resource, Shapes::ShapeRef.new(shape: Resource, required: true, location_name: "Resource"))
     RevokePermissionsRequest.add_member(:permissions, Shapes::ShapeRef.new(shape: PermissionList, required: true, location_name: "Permissions"))
+    RevokePermissionsRequest.add_member(:condition, Shapes::ShapeRef.new(shape: Condition, location_name: "Condition"))
     RevokePermissionsRequest.add_member(:permissions_with_grant_option, Shapes::ShapeRef.new(shape: PermissionList, location_name: "PermissionsWithGrantOption"))
     RevokePermissionsRequest.struct_class = Types::RevokePermissionsRequest
 
@@ -1394,6 +1402,7 @@ module Aws::LakeFormation
         o.errors << Shapes::ShapeRef.new(shape: EntityNotFoundException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
         o.errors << Shapes::ShapeRef.new(shape: ConcurrentModificationException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNumberLimitExceededException)
       end)
 
       api.add_operation(:delete_data_cells_filter, Seahorse::Model::Operation.new.tap do |o|

data/lib/aws-sdk-lakeformation/types.rb

@@ -271,6 +271,11 @@ module Aws::LakeFormation
     #   The permissions to be granted.
     #   @return [Array<String>]
     #
+    # @!attribute [rw] condition
+    #   A Lake Formation condition, which applies to permissions and opt-ins
+    #   that contain an expression.
+    #   @return [Types::Condition]
+    #
     # @!attribute [rw] permissions_with_grant_option
     #   Indicates if the option to pass permissions is granted.
     #   @return [Array<String>]
@@ -282,6 +287,7 @@ module Aws::LakeFormation
       :principal,
       :resource,
       :permissions,
+      :condition,
       :permissions_with_grant_option)
       SENSITIVE = []
       include Aws::Structure
@@ -585,11 +591,17 @@ module Aws::LakeFormation
     #   A structure for the resource.
     #   @return [Types::Resource]
     #
+    # @!attribute [rw] condition
+    #   A Lake Formation condition, which applies to permissions and opt-ins
+    #   that contain an expression.
+    #   @return [Types::Condition]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/CreateLakeFormationOptInRequest AWS API Documentation
     #
     class CreateLakeFormationOptInRequest < Struct.new(
       :principal,
-      :resource)
+      :resource,
+      :condition)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -979,11 +991,17 @@ module Aws::LakeFormation
     #   A structure for the resource.
     #   @return [Types::Resource]
     #
+    # @!attribute [rw] condition
+    #   A Lake Formation condition, which applies to permissions and opt-ins
+    #   that contain an expression.
+    #   @return [Types::Condition]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/DeleteLakeFormationOptInRequest AWS API Documentation
     #
     class DeleteLakeFormationOptInRequest < Struct.new(
       :principal,
-      :resource)
+      :resource,
+      :condition)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -2060,6 +2078,11 @@ module Aws::LakeFormation
     #   authorized to perform a specific task on Lake Formation resources.
     #   @return [Array<String>]
     #
+    # @!attribute [rw] condition
+    #   A Lake Formation condition, which applies to permissions and opt-ins
+    #   that contain an expression.
+    #   @return [Types::Condition]
+    #
     # @!attribute [rw] permissions_with_grant_option
     #   Indicates a list of the granted permissions that the principal may
     #   pass to other users. These permissions may only be a subset of the
@@ -2073,6 +2096,7 @@ module Aws::LakeFormation
       :principal,
       :resource,
       :permissions,
+      :condition,
       :permissions_with_grant_option)
       SENSITIVE = []
       include Aws::Structure
@@ -3037,6 +3061,11 @@ module Aws::LakeFormation
     #   S3 bucket policies.
     #   @return [Boolean]
     #
+    # @!attribute [rw] with_privileged_access
+    #   Grants the calling principal the permissions to perform all
+    #   supported Lake Formation operations on the registered data location.
+    #   @return [Boolean]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/RegisterResourceRequest AWS API Documentation
     #
     class RegisterResourceRequest < Struct.new(
@@ -3044,7 +3073,8 @@ module Aws::LakeFormation
       :use_service_linked_role,
       :role_arn,
       :with_federation,
-      :hybrid_access_enabled)
+      :hybrid_access_enabled,
+      :with_privileged_access)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -3182,6 +3212,11 @@ module Aws::LakeFormation
     #   S3 bucket policies.
     #   @return [Boolean]
     #
+    # @!attribute [rw] with_privileged_access
+    #   Grants the calling principal the permissions to perform all
+    #   supported Lake Formation operations on the registered data location.
+    #   @return [Boolean]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lakeformation-2017-03-31/ResourceInfo AWS API Documentation
     #
     class ResourceInfo < Struct.new(
@@ -3189,7 +3224,8 @@ module Aws::LakeFormation
       :role_arn,
       :last_modified,
       :with_federation,
-      :hybrid_access_enabled)
+      :hybrid_access_enabled,
+      :with_privileged_access)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -3248,6 +3284,11 @@ module Aws::LakeFormation
     #   [1]: https://docs.aws.amazon.com/lake-formation/latest/dg/security-data-access.html
     #   @return [Array<String>]
     #
+    # @!attribute [rw] condition
+    #   A Lake Formation condition, which applies to permissions and opt-ins
+    #   that contain an expression.
+    #   @return [Types::Condition]
+    #
     # @!attribute [rw] permissions_with_grant_option
     #   Indicates a list of permissions for which to revoke the grant option
     #   allowing the principal to pass permissions to other principals.
@@ -3260,6 +3301,7 @@ module Aws::LakeFormation
       :principal,
       :resource,
       :permissions,
+      :condition,
       :permissions_with_grant_option)
       SENSITIVE = []
       include Aws::Structure

data/lib/aws-sdk-lakeformation.rb

@@ -54,7 +54,7 @@ module Aws::LakeFormation
   autoload :EndpointProvider, 'aws-sdk-lakeformation/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-lakeformation/endpoints'
 
-  GEM_VERSION = '1.68.0'
+  GEM_VERSION = '1.69.0'
 
 end
 

data/sig/client.rbs

@@ -234,6 +234,9 @@ module Aws
                                            }?
                                          }?,
                                          permissions: Array[("ALL" | "SELECT" | "ALTER" | "DROP" | "DELETE" | "INSERT" | "DESCRIBE" | "CREATE_DATABASE" | "CREATE_TABLE" | "DATA_LOCATION_ACCESS" | "CREATE_LF_TAG" | "ASSOCIATE" | "GRANT_WITH_LF_TAG_EXPRESSION" | "CREATE_LF_TAG_EXPRESSION" | "CREATE_CATALOG" | "SUPER_USER")]?,
+                                         condition: {
+                                           expression: ::String?
+                                         }?,
                                          permissions_with_grant_option: Array[("ALL" | "SELECT" | "ALTER" | "DROP" | "DELETE" | "INSERT" | "DESCRIBE" | "CREATE_DATABASE" | "CREATE_TABLE" | "DATA_LOCATION_ACCESS" | "CREATE_LF_TAG" | "ASSOCIATE" | "GRANT_WITH_LF_TAG_EXPRESSION" | "CREATE_LF_TAG_EXPRESSION" | "CREATE_CATALOG" | "SUPER_USER")]?
                                        },
                                      ]
@@ -309,6 +312,9 @@ module Aws
                                             }?
                                           }?,
                                           permissions: Array[("ALL" | "SELECT" | "ALTER" | "DROP" | "DELETE" | "INSERT" | "DESCRIBE" | "CREATE_DATABASE" | "CREATE_TABLE" | "DATA_LOCATION_ACCESS" | "CREATE_LF_TAG" | "ASSOCIATE" | "GRANT_WITH_LF_TAG_EXPRESSION" | "CREATE_LF_TAG_EXPRESSION" | "CREATE_CATALOG" | "SUPER_USER")]?,
+                                          condition: {
+                                            expression: ::String?
+                                          }?,
                                           permissions_with_grant_option: Array[("ALL" | "SELECT" | "ALTER" | "DROP" | "DELETE" | "INSERT" | "DESCRIBE" | "CREATE_DATABASE" | "CREATE_TABLE" | "DATA_LOCATION_ACCESS" | "CREATE_LF_TAG" | "ASSOCIATE" | "GRANT_WITH_LF_TAG_EXPRESSION" | "CREATE_LF_TAG_EXPRESSION" | "CREATE_CATALOG" | "SUPER_USER")]?
                                         },
                                       ]
@@ -468,6 +474,9 @@ module Aws
                                               catalog_id: ::String?,
                                               name: ::String
                                             }?
+                                          },
+                                          ?condition: {
+                                            expression: ::String?
                                           }
                                         ) -> _CreateLakeFormationOptInResponseSuccess
                                       | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreateLakeFormationOptInResponseSuccess
@@ -575,6 +584,9 @@ module Aws
                                               catalog_id: ::String?,
                                               name: ::String
                                             }?
+                                          },
+                                          ?condition: {
+                                            expression: ::String?
                                           }
                                         ) -> _DeleteLakeFormationOptInResponseSuccess
                                       | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DeleteLakeFormationOptInResponseSuccess
@@ -972,6 +984,9 @@ module Aws
                                  }?
                                },
                                permissions: Array[("ALL" | "SELECT" | "ALTER" | "DROP" | "DELETE" | "INSERT" | "DESCRIBE" | "CREATE_DATABASE" | "CREATE_TABLE" | "DATA_LOCATION_ACCESS" | "CREATE_LF_TAG" | "ASSOCIATE" | "GRANT_WITH_LF_TAG_EXPRESSION" | "CREATE_LF_TAG_EXPRESSION" | "CREATE_CATALOG" | "SUPER_USER")],
+                               ?condition: {
+                                 expression: ::String?
+                               },
                                ?permissions_with_grant_option: Array[("ALL" | "SELECT" | "ALTER" | "DROP" | "DELETE" | "INSERT" | "DESCRIBE" | "CREATE_DATABASE" | "CREATE_TABLE" | "DATA_LOCATION_ACCESS" | "CREATE_LF_TAG" | "ASSOCIATE" | "GRANT_WITH_LF_TAG_EXPRESSION" | "CREATE_LF_TAG_EXPRESSION" | "CREATE_CATALOG" | "SUPER_USER")]
                              ) -> _GrantPermissionsResponseSuccess
                            | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _GrantPermissionsResponseSuccess
@@ -1270,7 +1285,8 @@ module Aws
                                ?use_service_linked_role: bool,
                                ?role_arn: ::String,
                                ?with_federation: bool,
-                               ?hybrid_access_enabled: bool
+                               ?hybrid_access_enabled: bool,
+                               ?with_privileged_access: bool
                              ) -> _RegisterResourceResponseSuccess
                            | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _RegisterResourceResponseSuccess
 
@@ -1411,6 +1427,9 @@ module Aws
                                   }?
                                 },
                                 permissions: Array[("ALL" | "SELECT" | "ALTER" | "DROP" | "DELETE" | "INSERT" | "DESCRIBE" | "CREATE_DATABASE" | "CREATE_TABLE" | "DATA_LOCATION_ACCESS" | "CREATE_LF_TAG" | "ASSOCIATE" | "GRANT_WITH_LF_TAG_EXPRESSION" | "CREATE_LF_TAG_EXPRESSION" | "CREATE_CATALOG" | "SUPER_USER")],
+                                ?condition: {
+                                  expression: ::String?
+                                },
                                 ?permissions_with_grant_option: Array[("ALL" | "SELECT" | "ALTER" | "DROP" | "DELETE" | "INSERT" | "DESCRIBE" | "CREATE_DATABASE" | "CREATE_TABLE" | "DATA_LOCATION_ACCESS" | "CREATE_LF_TAG" | "ASSOCIATE" | "GRANT_WITH_LF_TAG_EXPRESSION" | "CREATE_LF_TAG_EXPRESSION" | "CREATE_CATALOG" | "SUPER_USER")]
                               ) -> _RevokePermissionsResponseSuccess
                             | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _RevokePermissionsResponseSuccess

data/sig/types.rbs

@@ -84,6 +84,7 @@ module Aws::LakeFormation
       attr_accessor principal: Types::DataLakePrincipal
       attr_accessor resource: Types::Resource
       attr_accessor permissions: ::Array[("ALL" | "SELECT" | "ALTER" | "DROP" | "DELETE" | "INSERT" | "DESCRIBE" | "CREATE_DATABASE" | "CREATE_TABLE" | "DATA_LOCATION_ACCESS" | "CREATE_LF_TAG" | "ASSOCIATE" | "GRANT_WITH_LF_TAG_EXPRESSION" | "CREATE_LF_TAG_EXPRESSION" | "CREATE_CATALOG" | "SUPER_USER")]
+      attr_accessor condition: Types::Condition
       attr_accessor permissions_with_grant_option: ::Array[("ALL" | "SELECT" | "ALTER" | "DROP" | "DELETE" | "INSERT" | "DESCRIBE" | "CREATE_DATABASE" | "CREATE_TABLE" | "DATA_LOCATION_ACCESS" | "CREATE_LF_TAG" | "ASSOCIATE" | "GRANT_WITH_LF_TAG_EXPRESSION" | "CREATE_LF_TAG_EXPRESSION" | "CREATE_CATALOG" | "SUPER_USER")]
       SENSITIVE: []
     end
@@ -188,6 +189,7 @@ module Aws::LakeFormation
     class CreateLakeFormationOptInRequest
       attr_accessor principal: Types::DataLakePrincipal
       attr_accessor resource: Types::Resource
+      attr_accessor condition: Types::Condition
       SENSITIVE: []
     end
 
@@ -285,6 +287,7 @@ module Aws::LakeFormation
     class DeleteLakeFormationOptInRequest
       attr_accessor principal: Types::DataLakePrincipal
       attr_accessor resource: Types::Resource
+      attr_accessor condition: Types::Condition
       SENSITIVE: []
     end
 
@@ -603,6 +606,7 @@ module Aws::LakeFormation
       attr_accessor principal: Types::DataLakePrincipal
       attr_accessor resource: Types::Resource
       attr_accessor permissions: ::Array[("ALL" | "SELECT" | "ALTER" | "DROP" | "DELETE" | "INSERT" | "DESCRIBE" | "CREATE_DATABASE" | "CREATE_TABLE" | "DATA_LOCATION_ACCESS" | "CREATE_LF_TAG" | "ASSOCIATE" | "GRANT_WITH_LF_TAG_EXPRESSION" | "CREATE_LF_TAG_EXPRESSION" | "CREATE_CATALOG" | "SUPER_USER")]
+      attr_accessor condition: Types::Condition
       attr_accessor permissions_with_grant_option: ::Array[("ALL" | "SELECT" | "ALTER" | "DROP" | "DELETE" | "INSERT" | "DESCRIBE" | "CREATE_DATABASE" | "CREATE_TABLE" | "DATA_LOCATION_ACCESS" | "CREATE_LF_TAG" | "ASSOCIATE" | "GRANT_WITH_LF_TAG_EXPRESSION" | "CREATE_LF_TAG_EXPRESSION" | "CREATE_CATALOG" | "SUPER_USER")]
       SENSITIVE: []
     end
@@ -871,6 +875,7 @@ module Aws::LakeFormation
       attr_accessor role_arn: ::String
       attr_accessor with_federation: bool
       attr_accessor hybrid_access_enabled: bool
+      attr_accessor with_privileged_access: bool
       SENSITIVE: []
     end
 
@@ -908,6 +913,7 @@ module Aws::LakeFormation
       attr_accessor last_modified: ::Time
       attr_accessor with_federation: bool
       attr_accessor hybrid_access_enabled: bool
+      attr_accessor with_privileged_access: bool
       SENSITIVE: []
     end
 
@@ -926,6 +932,7 @@ module Aws::LakeFormation
       attr_accessor principal: Types::DataLakePrincipal
       attr_accessor resource: Types::Resource
       attr_accessor permissions: ::Array[("ALL" | "SELECT" | "ALTER" | "DROP" | "DELETE" | "INSERT" | "DESCRIBE" | "CREATE_DATABASE" | "CREATE_TABLE" | "DATA_LOCATION_ACCESS" | "CREATE_LF_TAG" | "ASSOCIATE" | "GRANT_WITH_LF_TAG_EXPRESSION" | "CREATE_LF_TAG_EXPRESSION" | "CREATE_CATALOG" | "SUPER_USER")]
+      attr_accessor condition: Types::Condition
       attr_accessor permissions_with_grant_option: ::Array[("ALL" | "SELECT" | "ALTER" | "DROP" | "DELETE" | "INSERT" | "DESCRIBE" | "CREATE_DATABASE" | "CREATE_TABLE" | "DATA_LOCATION_ACCESS" | "CREATE_LF_TAG" | "ASSOCIATE" | "GRANT_WITH_LF_TAG_EXPRESSION" | "CREATE_LF_TAG_EXPRESSION" | "CREATE_CATALOG" | "SUPER_USER")]
       SENSITIVE: []
     end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-lakeformation
 version: !ruby/object:Gem::Version
-  version: 1.68.0
+  version: 1.69.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-02-18 00:00:00.000000000 Z
+date: 2025-03-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core