@aws-sdk/client-lakeformation 3.370.0 → 3.377.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (15) hide show
  1. package/dist-cjs/models/models_0.js +4 -1
  2. package/dist-es/models/models_0.js +4 -1
  3. package/dist-types/commands/BatchGrantPermissionsCommand.d.ts +4 -4
  4. package/dist-types/commands/BatchRevokePermissionsCommand.d.ts +4 -4
  5. package/dist-types/commands/GetDataLakeSettingsCommand.d.ts +8 -2
  6. package/dist-types/commands/GetEffectivePermissionsForPathCommand.d.ts +2 -2
  7. package/dist-types/commands/GetTemporaryGluePartitionCredentialsCommand.d.ts +3 -3
  8. package/dist-types/commands/GetTemporaryGlueTableCredentialsCommand.d.ts +3 -3
  9. package/dist-types/commands/GrantPermissionsCommand.d.ts +2 -2
  10. package/dist-types/commands/ListPermissionsCommand.d.ts +3 -3
  11. package/dist-types/commands/PutDataLakeSettingsCommand.d.ts +8 -2
  12. package/dist-types/commands/RevokePermissionsCommand.d.ts +2 -2
  13. package/dist-types/models/models_0.d.ts +16 -5
  14. package/dist-types/ts3.4/models/models_0.d.ts +8 -3
  15. package/package.json +2 -2
package/dist-cjs/models/models_0.js CHANGED
@@ -110,12 +110,13 @@ exports.Permission = {
110
110
  ALTER: "ALTER",
111
111
  ASSOCIATE: "ASSOCIATE",
112
112
  CREATE_DATABASE: "CREATE_DATABASE",
113
+ CREATE_LF_TAG: "CREATE_LF_TAG",
113
114
  CREATE_TABLE: "CREATE_TABLE",
114
- CREATE_TAG: "CREATE_TAG",
115
115
  DATA_LOCATION_ACCESS: "DATA_LOCATION_ACCESS",
116
116
  DELETE: "DELETE",
117
117
  DESCRIBE: "DESCRIBE",
118
118
  DROP: "DROP",
119
+ GRANT_WITH_LF_TAG_EXPRESSION: "GRANT_WITH_LF_TAG_EXPRESSION",
119
120
  INSERT: "INSERT",
120
121
  SELECT: "SELECT",
121
122
  };
@@ -264,6 +265,8 @@ exports.GlueEncryptionException = GlueEncryptionException;
264
265
  exports.PermissionType = {
265
266
  CELL_FILTER_PERMISSION: "CELL_FILTER_PERMISSION",
266
267
  COLUMN_PERMISSION: "COLUMN_PERMISSION",
268
+ NESTED_CELL_PERMISSION: "NESTED_CELL_PERMISSION",
269
+ NESTED_PERMISSION: "NESTED_PERMISSION",
267
270
  };
268
271
  class PermissionTypeMismatchException extends LakeFormationServiceException_1.LakeFormationServiceException {
269
272
  constructor(opts) {
package/dist-es/models/models_0.js CHANGED
@@ -100,12 +100,13 @@ export const Permission = {
100
100
  ALTER: "ALTER",
101
101
  ASSOCIATE: "ASSOCIATE",
102
102
  CREATE_DATABASE: "CREATE_DATABASE",
103
+ CREATE_LF_TAG: "CREATE_LF_TAG",
103
104
  CREATE_TABLE: "CREATE_TABLE",
104
- CREATE_TAG: "CREATE_TAG",
105
105
  DATA_LOCATION_ACCESS: "DATA_LOCATION_ACCESS",
106
106
  DELETE: "DELETE",
107
107
  DESCRIBE: "DESCRIBE",
108
108
  DROP: "DROP",
109
+ GRANT_WITH_LF_TAG_EXPRESSION: "GRANT_WITH_LF_TAG_EXPRESSION",
109
110
  INSERT: "INSERT",
110
111
  SELECT: "SELECT",
111
112
  };
@@ -245,6 +246,8 @@ export class GlueEncryptionException extends __BaseException {
245
246
  export const PermissionType = {
246
247
  CELL_FILTER_PERMISSION: "CELL_FILTER_PERMISSION",
247
248
  COLUMN_PERMISSION: "COLUMN_PERMISSION",
249
+ NESTED_CELL_PERMISSION: "NESTED_CELL_PERMISSION",
250
+ NESTED_PERMISSION: "NESTED_PERMISSION",
248
251
  };
249
252
  export class PermissionTypeMismatchException extends __BaseException {
250
253
  constructor(opts) {
package/dist-types/commands/BatchGrantPermissionsCommand.d.ts CHANGED
@@ -94,10 +94,10 @@ export interface BatchGrantPermissionsCommandOutput extends BatchGrantPermission
94
94
  * },
95
95
  * },
96
96
  * Permissions: [ // PermissionList
97
- * "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_TAG" || "ASSOCIATE",
97
+ * "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_LF_TAG" || "ASSOCIATE" || "GRANT_WITH_LF_TAG_EXPRESSION",
98
98
  * ],
99
99
  * PermissionsWithGrantOption: [
100
- * "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_TAG" || "ASSOCIATE",
100
+ * "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_LF_TAG" || "ASSOCIATE" || "GRANT_WITH_LF_TAG_EXPRESSION",
101
101
  * ],
102
102
  * },
103
103
  * ],
@@ -168,10 +168,10 @@ export interface BatchGrantPermissionsCommandOutput extends BatchGrantPermission
168
168
  * // },
169
169
  * // },
170
170
  * // Permissions: [ // PermissionList
171
- * // "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_TAG" || "ASSOCIATE",
171
+ * // "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_LF_TAG" || "ASSOCIATE" || "GRANT_WITH_LF_TAG_EXPRESSION",
172
172
  * // ],
173
173
  * // PermissionsWithGrantOption: [
174
- * // "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_TAG" || "ASSOCIATE",
174
+ * // "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_LF_TAG" || "ASSOCIATE" || "GRANT_WITH_LF_TAG_EXPRESSION",
175
175
  * // ],
176
176
  * // },
177
177
  * // Error: { // ErrorDetail
package/dist-types/commands/BatchRevokePermissionsCommand.d.ts CHANGED
@@ -94,10 +94,10 @@ export interface BatchRevokePermissionsCommandOutput extends BatchRevokePermissi
94
94
  * },
95
95
  * },
96
96
  * Permissions: [ // PermissionList
97
- * "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_TAG" || "ASSOCIATE",
97
+ * "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_LF_TAG" || "ASSOCIATE" || "GRANT_WITH_LF_TAG_EXPRESSION",
98
98
  * ],
99
99
  * PermissionsWithGrantOption: [
100
- * "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_TAG" || "ASSOCIATE",
100
+ * "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_LF_TAG" || "ASSOCIATE" || "GRANT_WITH_LF_TAG_EXPRESSION",
101
101
  * ],
102
102
  * },
103
103
  * ],
@@ -168,10 +168,10 @@ export interface BatchRevokePermissionsCommandOutput extends BatchRevokePermissi
168
168
  * // },
169
169
  * // },
170
170
  * // Permissions: [ // PermissionList
171
- * // "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_TAG" || "ASSOCIATE",
171
+ * // "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_LF_TAG" || "ASSOCIATE" || "GRANT_WITH_LF_TAG_EXPRESSION",
172
172
  * // ],
173
173
  * // PermissionsWithGrantOption: [
174
- * // "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_TAG" || "ASSOCIATE",
174
+ * // "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_LF_TAG" || "ASSOCIATE" || "GRANT_WITH_LF_TAG_EXPRESSION",
175
175
  * // ],
176
176
  * // },
177
177
  * // Error: { // ErrorDetail
package/dist-types/commands/GetDataLakeSettingsCommand.d.ts CHANGED
@@ -42,13 +42,18 @@ export interface GetDataLakeSettingsCommandOutput extends GetDataLakeSettingsRes
42
42
  * // DataLakePrincipalIdentifier: "STRING_VALUE",
43
43
  * // },
44
44
  * // ],
45
+ * // ReadOnlyAdmins: [
46
+ * // {
47
+ * // DataLakePrincipalIdentifier: "STRING_VALUE",
48
+ * // },
49
+ * // ],
45
50
  * // CreateDatabaseDefaultPermissions: [ // PrincipalPermissionsList
46
51
  * // { // PrincipalPermissions
47
52
  * // Principal: {
48
53
  * // DataLakePrincipalIdentifier: "STRING_VALUE",
49
54
  * // },
50
55
  * // Permissions: [ // PermissionList
51
- * // "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_TAG" || "ASSOCIATE",
56
+ * // "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_LF_TAG" || "ASSOCIATE" || "GRANT_WITH_LF_TAG_EXPRESSION",
52
57
  * // ],
53
58
  * // },
54
59
  * // ],
@@ -58,7 +63,7 @@ export interface GetDataLakeSettingsCommandOutput extends GetDataLakeSettingsRes
58
63
  * // DataLakePrincipalIdentifier: "STRING_VALUE",
59
64
  * // },
60
65
  * // Permissions: [
61
- * // "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_TAG" || "ASSOCIATE",
66
+ * // "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_LF_TAG" || "ASSOCIATE" || "GRANT_WITH_LF_TAG_EXPRESSION",
62
67
  * // ],
63
68
  * // },
64
69
  * // ],
@@ -69,6 +74,7 @@ export interface GetDataLakeSettingsCommandOutput extends GetDataLakeSettingsRes
69
74
  * // "STRING_VALUE",
70
75
  * // ],
71
76
  * // AllowExternalDataFiltering: true || false,
77
+ * // AllowFullTableExternalDataAccess: true || false,
72
78
  * // ExternalDataFilteringAllowList: [
73
79
  * // {
74
80
  * // DataLakePrincipalIdentifier: "STRING_VALUE",
package/dist-types/commands/GetEffectivePermissionsForPathCommand.d.ts CHANGED
@@ -101,10 +101,10 @@ export interface GetEffectivePermissionsForPathCommandOutput extends GetEffectiv
101
101
  * // },
102
102
  * // },
103
103
  * // Permissions: [ // PermissionList
104
- * // "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_TAG" || "ASSOCIATE",
104
+ * // "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_LF_TAG" || "ASSOCIATE" || "GRANT_WITH_LF_TAG_EXPRESSION",
105
105
  * // ],
106
106
  * // PermissionsWithGrantOption: [
107
- * // "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_TAG" || "ASSOCIATE",
107
+ * // "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_LF_TAG" || "ASSOCIATE" || "GRANT_WITH_LF_TAG_EXPRESSION",
108
108
  * // ],
109
109
  * // AdditionalDetails: { // DetailsMap
110
110
  * // ResourceShare: [ // ResourceShareList
package/dist-types/commands/GetTemporaryGluePartitionCredentialsCommand.d.ts CHANGED
@@ -38,14 +38,14 @@ export interface GetTemporaryGluePartitionCredentialsCommandOutput extends GetTe
38
38
  * ],
39
39
  * },
40
40
  * Permissions: [ // PermissionList
41
- * "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_TAG" || "ASSOCIATE",
41
+ * "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_LF_TAG" || "ASSOCIATE" || "GRANT_WITH_LF_TAG_EXPRESSION",
42
42
  * ],
43
43
  * DurationSeconds: Number("int"),
44
44
  * AuditContext: { // AuditContext
45
45
  * AdditionalAuditContext: "STRING_VALUE",
46
46
  * },
47
- * SupportedPermissionTypes: [ // PermissionTypeList // required
48
- * "COLUMN_PERMISSION" || "CELL_FILTER_PERMISSION",
47
+ * SupportedPermissionTypes: [ // PermissionTypeList
48
+ * "COLUMN_PERMISSION" || "CELL_FILTER_PERMISSION" || "NESTED_PERMISSION" || "NESTED_CELL_PERMISSION",
49
49
  * ],
50
50
  * };
51
51
  * const command = new GetTemporaryGluePartitionCredentialsCommand(input);
package/dist-types/commands/GetTemporaryGlueTableCredentialsCommand.d.ts CHANGED
@@ -33,14 +33,14 @@ export interface GetTemporaryGlueTableCredentialsCommandOutput extends GetTempor
33
33
  * const input = { // GetTemporaryGlueTableCredentialsRequest
34
34
  * TableArn: "STRING_VALUE", // required
35
35
  * Permissions: [ // PermissionList
36
- * "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_TAG" || "ASSOCIATE",
36
+ * "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_LF_TAG" || "ASSOCIATE" || "GRANT_WITH_LF_TAG_EXPRESSION",
37
37
  * ],
38
38
  * DurationSeconds: Number("int"),
39
39
  * AuditContext: { // AuditContext
40
40
  * AdditionalAuditContext: "STRING_VALUE",
41
41
  * },
42
- * SupportedPermissionTypes: [ // PermissionTypeList // required
43
- * "COLUMN_PERMISSION" || "CELL_FILTER_PERMISSION",
42
+ * SupportedPermissionTypes: [ // PermissionTypeList
43
+ * "COLUMN_PERMISSION" || "CELL_FILTER_PERMISSION" || "NESTED_PERMISSION" || "NESTED_CELL_PERMISSION",
44
44
  * ],
45
45
  * };
46
46
  * const command = new GetTemporaryGlueTableCredentialsCommand(input);
package/dist-types/commands/GrantPermissionsCommand.d.ts CHANGED
@@ -92,10 +92,10 @@ export interface GrantPermissionsCommandOutput extends GrantPermissionsResponse,
92
92
  * },
93
93
  * },
94
94
  * Permissions: [ // PermissionList // required
95
- * "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_TAG" || "ASSOCIATE",
95
+ * "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_LF_TAG" || "ASSOCIATE" || "GRANT_WITH_LF_TAG_EXPRESSION",
96
96
  * ],
97
97
  * PermissionsWithGrantOption: [
98
- * "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_TAG" || "ASSOCIATE",
98
+ * "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_LF_TAG" || "ASSOCIATE" || "GRANT_WITH_LF_TAG_EXPRESSION",
99
99
  * ],
100
100
  * };
101
101
  * const command = new GrantPermissionsCommand(input);
package/dist-types/commands/ListPermissionsCommand.d.ts CHANGED
@@ -25,7 +25,7 @@ export interface ListPermissionsCommandOutput extends ListPermissionsResponse, _
25
25
  * @public
26
26
  * <p>Returns a list of the principal permissions on the resource, filtered by the permissions of the caller. For example, if you are granted an ALTER permission, you are able to see only the principal permissions for ALTER.</p>
27
27
  * <p>This operation returns only those permissions that have been explicitly granted.</p>
28
- * <p>For information about permissions, see <a href="https://docs-aws.amazon.com/lake-formation/latest/dg/security-data-access.html">Security and Access Control to Metadata and Data</a>.</p>
28
+ * <p>For information about permissions, see <a href="https://docs.aws.amazon.com/lake-formation/latest/dg/security-data-access.html">Security and Access Control to Metadata and Data</a>.</p>
29
29
  * @example
30
30
  * Use a bare-bones client and the command you need to make an API call.
31
31
  * ```javascript
@@ -161,10 +161,10 @@ export interface ListPermissionsCommandOutput extends ListPermissionsResponse, _
161
161
  * // },
162
162
  * // },
163
163
  * // Permissions: [ // PermissionList
164
- * // "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_TAG" || "ASSOCIATE",
164
+ * // "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_LF_TAG" || "ASSOCIATE" || "GRANT_WITH_LF_TAG_EXPRESSION",
165
165
  * // ],
166
166
  * // PermissionsWithGrantOption: [
167
- * // "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_TAG" || "ASSOCIATE",
167
+ * // "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_LF_TAG" || "ASSOCIATE" || "GRANT_WITH_LF_TAG_EXPRESSION",
168
168
  * // ],
169
169
  * // AdditionalDetails: { // DetailsMap
170
170
  * // ResourceShare: [ // ResourceShareList
package/dist-types/commands/PutDataLakeSettingsCommand.d.ts CHANGED
@@ -39,13 +39,18 @@ export interface PutDataLakeSettingsCommandOutput extends PutDataLakeSettingsRes
39
39
  * DataLakePrincipalIdentifier: "STRING_VALUE",
40
40
  * },
41
41
  * ],
42
+ * ReadOnlyAdmins: [
43
+ * {
44
+ * DataLakePrincipalIdentifier: "STRING_VALUE",
45
+ * },
46
+ * ],
42
47
  * CreateDatabaseDefaultPermissions: [ // PrincipalPermissionsList
43
48
  * { // PrincipalPermissions
44
49
  * Principal: {
45
50
  * DataLakePrincipalIdentifier: "STRING_VALUE",
46
51
  * },
47
52
  * Permissions: [ // PermissionList
48
- * "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_TAG" || "ASSOCIATE",
53
+ * "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_LF_TAG" || "ASSOCIATE" || "GRANT_WITH_LF_TAG_EXPRESSION",
49
54
  * ],
50
55
  * },
51
56
  * ],
@@ -55,7 +60,7 @@ export interface PutDataLakeSettingsCommandOutput extends PutDataLakeSettingsRes
55
60
  * DataLakePrincipalIdentifier: "STRING_VALUE",
56
61
  * },
57
62
  * Permissions: [
58
- * "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_TAG" || "ASSOCIATE",
63
+ * "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_LF_TAG" || "ASSOCIATE" || "GRANT_WITH_LF_TAG_EXPRESSION",
59
64
  * ],
60
65
  * },
61
66
  * ],
@@ -66,6 +71,7 @@ export interface PutDataLakeSettingsCommandOutput extends PutDataLakeSettingsRes
66
71
  * "STRING_VALUE",
67
72
  * ],
68
73
  * AllowExternalDataFiltering: true || false,
74
+ * AllowFullTableExternalDataAccess: true || false,
69
75
  * ExternalDataFilteringAllowList: [
70
76
  * {
71
77
  * DataLakePrincipalIdentifier: "STRING_VALUE",
package/dist-types/commands/RevokePermissionsCommand.d.ts CHANGED
@@ -91,10 +91,10 @@ export interface RevokePermissionsCommandOutput extends RevokePermissionsRespons
91
91
  * },
92
92
  * },
93
93
  * Permissions: [ // PermissionList // required
94
- * "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_TAG" || "ASSOCIATE",
94
+ * "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_LF_TAG" || "ASSOCIATE" || "GRANT_WITH_LF_TAG_EXPRESSION",
95
95
  * ],
96
96
  * PermissionsWithGrantOption: [
97
- * "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_TAG" || "ASSOCIATE",
97
+ * "ALL" || "SELECT" || "ALTER" || "DROP" || "DELETE" || "INSERT" || "DESCRIBE" || "CREATE_DATABASE" || "CREATE_TABLE" || "DATA_LOCATION_ACCESS" || "CREATE_LF_TAG" || "ASSOCIATE" || "GRANT_WITH_LF_TAG_EXPRESSION",
98
98
  * ],
99
99
  * };
100
100
  * const command = new RevokePermissionsCommand(input);
package/dist-types/models/models_0.d.ts CHANGED
@@ -498,12 +498,13 @@ export declare const Permission: {
498
498
  readonly ALTER: "ALTER";
499
499
  readonly ASSOCIATE: "ASSOCIATE";
500
500
  readonly CREATE_DATABASE: "CREATE_DATABASE";
501
+ readonly CREATE_LF_TAG: "CREATE_LF_TAG";
501
502
  readonly CREATE_TABLE: "CREATE_TABLE";
502
- readonly CREATE_TAG: "CREATE_TAG";
503
503
  readonly DATA_LOCATION_ACCESS: "DATA_LOCATION_ACCESS";
504
504
  readonly DELETE: "DELETE";
505
505
  readonly DESCRIBE: "DESCRIBE";
506
506
  readonly DROP: "DROP";
507
+ readonly GRANT_WITH_LF_TAG_EXPRESSION: "GRANT_WITH_LF_TAG_EXPRESSION";
507
508
  readonly INSERT: "INSERT";
508
509
  readonly SELECT: "SELECT";
509
510
  };
@@ -740,7 +741,7 @@ export interface DataCellsFilter {
740
741
  */
741
742
  RowFilter?: RowFilter;
742
743
  /**
743
- * <p>A list of column names.</p>
744
+ * <p>A list of column names and/or nested column attributes. When specifying nested attributes, use a qualified dot (.) delimited format such as "address"."zip". Nested attributes within this list may not exceed a depth of 5.</p>
744
745
  */
745
746
  ColumnNames?: string[];
746
747
  /**
@@ -1081,6 +1082,10 @@ export interface DataLakeSettings {
1081
1082
  * <p>A list of Lake Formation principals. Supported principals are IAM users or IAM roles.</p>
1082
1083
  */
1083
1084
  DataLakeAdmins?: DataLakePrincipal[];
1085
+ /**
1086
+ * <p>A list of Lake Formation principals with only view access to the resources, without the ability to make changes. Supported principals are IAM users or IAM roles.</p>
1087
+ */
1088
+ ReadOnlyAdmins?: DataLakePrincipal[];
1084
1089
  /**
1085
1090
  * <p>Specifies whether access control on newly created database is managed by Lake Formation permissions or exclusively by IAM permissions.</p>
1086
1091
  * <p>A null value indicates access control by Lake Formation permissions. A value that assigns ALL to IAM_ALLOWED_PRINCIPALS indicates access control by IAM permissions. This is referred to as the setting "Use only IAM access control," and is for backward compatibility with the Glue permission model implemented by IAM permissions.</p>
@@ -1108,9 +1113,13 @@ export interface DataLakeSettings {
1108
1113
  * <p>Whether to allow Amazon EMR clusters to access data managed by Lake Formation. </p>
1109
1114
  * <p>If true, you allow Amazon EMR clusters to access data in Amazon S3 locations that are registered with Lake Formation.</p>
1110
1115
  * <p>If false or null, no Amazon EMR clusters will be able to access data in Amazon S3 locations that are registered with Lake Formation.</p>
1111
- * <p>For more information, see <a href="https://docs-aws.amazon.com/lake-formation/latest/dg/getting-started-setup.html#emr-switch">(Optional) Allow Data Filtering on Amazon EMR</a>.</p>
1116
+ * <p>For more information, see <a href="https://docs.aws.amazon.com/lake-formation/latest/dg/initial-LF-setup.html#external-data-filter">(Optional) Allow external data filtering</a>.</p>
1112
1117
  */
1113
1118
  AllowExternalDataFiltering?: boolean;
1119
+ /**
1120
+ * <p>Whether to allow a third-party query engine to get data access credentials without session tags when a caller has full data access permissions.</p>
1121
+ */
1122
+ AllowFullTableExternalDataAccess?: boolean;
1114
1123
  /**
1115
1124
  * <p>A list of the account IDs of Amazon Web Services accounts with Amazon EMR clusters that are to perform data filtering.></p>
1116
1125
  */
@@ -1573,6 +1582,8 @@ export interface PartitionValueList {
1573
1582
  export declare const PermissionType: {
1574
1583
  readonly CELL_FILTER_PERMISSION: "CELL_FILTER_PERMISSION";
1575
1584
  readonly COLUMN_PERMISSION: "COLUMN_PERMISSION";
1585
+ readonly NESTED_CELL_PERMISSION: "NESTED_CELL_PERMISSION";
1586
+ readonly NESTED_PERMISSION: "NESTED_PERMISSION";
1576
1587
  };
1577
1588
  /**
1578
1589
  * @public
@@ -1605,7 +1616,7 @@ export interface GetTemporaryGluePartitionCredentialsRequest {
1605
1616
  /**
1606
1617
  * <p>A list of supported permission types for the partition. Valid values are <code>COLUMN_PERMISSION</code> and <code>CELL_FILTER_PERMISSION</code>.</p>
1607
1618
  */
1608
- SupportedPermissionTypes: (PermissionType | string)[] | undefined;
1619
+ SupportedPermissionTypes?: (PermissionType | string)[];
1609
1620
  }
1610
1621
  /**
1611
1622
  * @public
@@ -1667,7 +1678,7 @@ export interface GetTemporaryGlueTableCredentialsRequest {
1667
1678
  /**
1668
1679
  * <p>A list of supported permission types for the table. Valid values are <code>COLUMN_PERMISSION</code> and <code>CELL_FILTER_PERMISSION</code>.</p>
1669
1680
  */
1670
- SupportedPermissionTypes: (PermissionType | string)[] | undefined;
1681
+ SupportedPermissionTypes?: (PermissionType | string)[];
1671
1682
  }
1672
1683
  /**
1673
1684
  * @public
package/dist-types/ts3.4/models/models_0.d.ts CHANGED
@@ -169,12 +169,13 @@ export declare const Permission: {
169
169
  readonly ALTER: "ALTER";
170
170
  readonly ASSOCIATE: "ASSOCIATE";
171
171
  readonly CREATE_DATABASE: "CREATE_DATABASE";
172
+ readonly CREATE_LF_TAG: "CREATE_LF_TAG";
172
173
  readonly CREATE_TABLE: "CREATE_TABLE";
173
- readonly CREATE_TAG: "CREATE_TAG";
174
174
  readonly DATA_LOCATION_ACCESS: "DATA_LOCATION_ACCESS";
175
175
  readonly DELETE: "DELETE";
176
176
  readonly DESCRIBE: "DESCRIBE";
177
177
  readonly DROP: "DROP";
178
+ readonly GRANT_WITH_LF_TAG_EXPRESSION: "GRANT_WITH_LF_TAG_EXPRESSION";
178
179
  readonly INSERT: "INSERT";
179
180
  readonly SELECT: "SELECT";
180
181
  };
@@ -369,11 +370,13 @@ export interface PrincipalPermissions {
369
370
  }
370
371
  export interface DataLakeSettings {
371
372
  DataLakeAdmins?: DataLakePrincipal[];
373
+ ReadOnlyAdmins?: DataLakePrincipal[];
372
374
  CreateDatabaseDefaultPermissions?: PrincipalPermissions[];
373
375
  CreateTableDefaultPermissions?: PrincipalPermissions[];
374
376
  Parameters?: Record<string, string>;
375
377
  TrustedResourceOwners?: string[];
376
378
  AllowExternalDataFiltering?: boolean;
379
+ AllowFullTableExternalDataAccess?: boolean;
377
380
  ExternalDataFilteringAllowList?: DataLakePrincipal[];
378
381
  AuthorizedSessionTagValueList?: string[];
379
382
  }
@@ -518,6 +521,8 @@ export interface PartitionValueList {
518
521
  export declare const PermissionType: {
519
522
  readonly CELL_FILTER_PERMISSION: "CELL_FILTER_PERMISSION";
520
523
  readonly COLUMN_PERMISSION: "COLUMN_PERMISSION";
524
+ readonly NESTED_CELL_PERMISSION: "NESTED_CELL_PERMISSION";
525
+ readonly NESTED_PERMISSION: "NESTED_PERMISSION";
521
526
  };
522
527
  export type PermissionType =
523
528
  (typeof PermissionType)[keyof typeof PermissionType];
@@ -527,7 +532,7 @@ export interface GetTemporaryGluePartitionCredentialsRequest {
527
532
  Permissions?: (Permission | string)[];
528
533
  DurationSeconds?: number;
529
534
  AuditContext?: AuditContext;
530
- SupportedPermissionTypes: (PermissionType | string)[] | undefined;
535
+ SupportedPermissionTypes?: (PermissionType | string)[];
531
536
  }
532
537
  export interface GetTemporaryGluePartitionCredentialsResponse {
533
538
  AccessKeyId?: string;
@@ -551,7 +556,7 @@ export interface GetTemporaryGlueTableCredentialsRequest {
551
556
  Permissions?: (Permission | string)[];
552
557
  DurationSeconds?: number;
553
558
  AuditContext?: AuditContext;
554
- SupportedPermissionTypes: (PermissionType | string)[] | undefined;
559
+ SupportedPermissionTypes?: (PermissionType | string)[];
555
560
  }
556
561
  export interface GetTemporaryGlueTableCredentialsResponse {
557
562
  AccessKeyId?: string;
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "@aws-sdk/client-lakeformation",
3
3
  "description": "AWS SDK for JavaScript Lakeformation Client for Node.js, Browser and React Native",
4
- "version": "3.370.0",
4
+ "version": "3.377.0",
5
5
  "scripts": {
6
6
  "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
7
7
  "build:cjs": "tsc -p tsconfig.cjs.json",
@@ -21,7 +21,7 @@
21
21
  "dependencies": {
22
22
  "@aws-crypto/sha256-browser": "3.0.0",
23
23
  "@aws-crypto/sha256-js": "3.0.0",
24
- "@aws-sdk/client-sts": "3.370.0",
24
+ "@aws-sdk/client-sts": "3.377.0",
25
25
  "@aws-sdk/credential-provider-node": "3.370.0",
26
26
  "@aws-sdk/middleware-host-header": "3.370.0",
27
27
  "@aws-sdk/middleware-logger": "3.370.0",