@aws-sdk/client-lakeformation 3.45.0 → 3.46.0

package/dist-types/models/models_0.d.ts

@@ -527,6 +527,21 @@ export declare namespace AlreadyExistsException {
      */
     const filterSensitiveLog: (obj: AlreadyExistsException) => any;
 }
+/**
+ * <p>A structure used to include auditing information on the privileged API. </p>
+ */
+export interface AuditContext {
+    /**
+     * <p>The filter engine can populate the 'AdditionalAuditContext' information with the request ID for you to track. This information will be displayed in CloudTrail log in your account.</p>
+     */
+    AdditionalAuditContext?: string;
+}
+export declare namespace AuditContext {
+    /**
+     * @internal
+     */
+    const filterSensitiveLog: (obj: AuditContext) => any;
+}
 export declare enum Permission {
     ALL = "ALL",
     ALTER = "ALTER",
@@ -545,7 +560,8 @@ export declare enum Permission {
     SELECT = "SELECT"
 }
 /**
- * <p>The AWS Lake Formation principal. Supported principals are IAM users or IAM roles.</p>
+ * <p>The Lake Formation principal. Supported principals are IAM users
+ *       or IAM roles.</p>
  */
 export interface DataLakePrincipal {
     /**
@@ -815,6 +831,9 @@ export interface DataCellsFilter {
     ColumnNames?: string[];
     /**
      * <p>A wildcard with exclusions.</p>
+     *
+     *          <p>You must specify either a <code>ColumnNames</code> list or the
+     *       <code>ColumnWildCard</code>. </p>
      */
     ColumnWildcard?: ColumnWildcard;
 }
@@ -1221,6 +1240,24 @@ export interface DataLakeSettings {
      * 	        <p>You may want to specify this property when you are in a high-trust boundary, such as the same team or company. </p>
      */
     TrustedResourceOwners?: string[];
+    /**
+     * <p>Whether to allow Amazon EMR clusters to access data managed by Lake Formation. </p>
+     *
+     *          <p>If true, you allow Amazon EMR clusters to access data in Amazon S3 locations that are registered with Lake Formation.</p>
+     *
+     *          <p>If false or null, no Amazon EMR clusters will be able to access data in Amazon S3 locations that are registered with Lake Formation.</p>
+     *
+     *          <p>For more information, see <a href="https://docs-aws.amazon.com/lake-formation/latest/dg/getting-started-setup.html#emr-switch">(Optional) Allow Data Filtering on Amazon EMR</a>.</p>
+     */
+    AllowExternalDataFiltering?: boolean;
+    /**
+     * <p>A list of the account IDs of Amazon Web Services accounts with Amazon EMR clusters that are to perform data filtering.></p>
+     */
+    ExternalDataFilteringAllowList?: DataLakePrincipal[];
+    /**
+     * <p>Lake Formation relies on a privileged process secured by Amazon EMR or the third party integrator to tag the user's role while assuming it. Lake Formation will publish the acceptable key-value pair, for example key = "LakeFormationTrustedCaller" and value = "TRUE" and the third party integrator must properly tag the temporary security credentials that will be used to call Lake Formation's administrative APIs.</p>
+     */
+    AuthorizedSessionTagValueList?: string[];
 }
 export declare namespace DataLakeSettings {
     /**
@@ -1738,6 +1775,150 @@ export declare namespace GetTableObjectsResponse {
      */
     const filterSensitiveLog: (obj: GetTableObjectsResponse) => any;
 }
+/**
+ * <p>Contains a list of values defining partitions.</p>
+ */
+export interface PartitionValueList {
+    /**
+     * <p>The list of partition values.</p>
+     */
+    Values: string[] | undefined;
+}
+export declare namespace PartitionValueList {
+    /**
+     * @internal
+     */
+    const filterSensitiveLog: (obj: PartitionValueList) => any;
+}
+export declare enum PermissionType {
+    CELL_FILTER_PERMISSION = "CELL_FILTER_PERMISSION",
+    COLUMN_PERMISSION = "COLUMN_PERMISSION"
+}
+export interface GetTemporaryGluePartitionCredentialsRequest {
+    /**
+     * <p>The ARN of the partitions' table.</p>
+     */
+    TableArn: string | undefined;
+    /**
+     * <p>A list of partition values identifying a single partition.</p>
+     */
+    Partition: PartitionValueList | undefined;
+    /**
+     * <p>Filters the request based on the user having been granted a list of specified permissions on the requested resource(s).</p>
+     */
+    Permissions?: (Permission | string)[];
+    /**
+     * <p>The time period, between 900 and 21,600 seconds, for the timeout of the temporary credentials.</p>
+     */
+    DurationSeconds?: number;
+    /**
+     * <p>A structure representing context to access a resource (column names, query ID, etc).</p>
+     */
+    AuditContext?: AuditContext;
+    /**
+     * <p>A list of supported permission types for the partition. Valid values are <code>COLUMN_PERMISSION</code> and <code>CELL_FILTER_PERMISSION</code>.</p>
+     */
+    SupportedPermissionTypes: (PermissionType | string)[] | undefined;
+}
+export declare namespace GetTemporaryGluePartitionCredentialsRequest {
+    /**
+     * @internal
+     */
+    const filterSensitiveLog: (obj: GetTemporaryGluePartitionCredentialsRequest) => any;
+}
+export interface GetTemporaryGluePartitionCredentialsResponse {
+    /**
+     * <p>The access key ID for the temporary credentials.</p>
+     */
+    AccessKeyId?: string;
+    /**
+     * <p>The secret key for the temporary credentials.</p>
+     */
+    SecretAccessKey?: string;
+    /**
+     * <p>The session token for the temporary credentials.</p>
+     */
+    SessionToken?: string;
+    /**
+     * <p>The date and time when the temporary credentials expire.</p>
+     */
+    Expiration?: Date;
+}
+export declare namespace GetTemporaryGluePartitionCredentialsResponse {
+    /**
+     * @internal
+     */
+    const filterSensitiveLog: (obj: GetTemporaryGluePartitionCredentialsResponse) => any;
+}
+/**
+ * <p>The engine does not support filtering data based on the enforced permissions. For example, if you call the <code>GetTemporaryGlueTableCredentials</code> operation with <code>SupportedPermissionType</code> equal to <code>ColumnPermission</code>, but cell-level permissions exist on the table, this exception is thrown.</p>
+ */
+export interface PermissionTypeMismatchException extends __SmithyException, $MetadataBearer {
+    name: "PermissionTypeMismatchException";
+    $fault: "client";
+    /**
+     * <p>A message describing the problem.</p>
+     */
+    Message?: string;
+}
+export declare namespace PermissionTypeMismatchException {
+    /**
+     * @internal
+     */
+    const filterSensitiveLog: (obj: PermissionTypeMismatchException) => any;
+}
+export interface GetTemporaryGlueTableCredentialsRequest {
+    /**
+     * <p>The ARN identifying a table in the Data Catalog for the temporary credentials request.</p>
+     */
+    TableArn: string | undefined;
+    /**
+     * <p>Filters the request based on the user having been granted a list of specified permissions on the requested resource(s).</p>
+     */
+    Permissions?: (Permission | string)[];
+    /**
+     * <p>The time period, between 900 and 21,600 seconds, for the timeout of the temporary credentials.</p>
+     */
+    DurationSeconds?: number;
+    /**
+     * <p>A structure representing context to access a resource (column names, query ID, etc).</p>
+     */
+    AuditContext?: AuditContext;
+    /**
+     * <p>A list of supported permission types for the table. Valid values are <code>COLUMN_PERMISSION</code> and <code>CELL_FILTER_PERMISSION</code>.</p>
+     */
+    SupportedPermissionTypes: (PermissionType | string)[] | undefined;
+}
+export declare namespace GetTemporaryGlueTableCredentialsRequest {
+    /**
+     * @internal
+     */
+    const filterSensitiveLog: (obj: GetTemporaryGlueTableCredentialsRequest) => any;
+}
+export interface GetTemporaryGlueTableCredentialsResponse {
+    /**
+     * <p>The access key ID for the temporary credentials.</p>
+     */
+    AccessKeyId?: string;
+    /**
+     * <p>The secret key for the temporary credentials.</p>
+     */
+    SecretAccessKey?: string;
+    /**
+     * <p>The session token for the temporary credentials.</p>
+     */
+    SessionToken?: string;
+    /**
+     * <p>The date and time when the temporary credentials expire.</p>
+     */
+    Expiration?: Date;
+}
+export declare namespace GetTemporaryGlueTableCredentialsResponse {
+    /**
+     * @internal
+     */
+    const filterSensitiveLog: (obj: GetTemporaryGlueTableCredentialsResponse) => any;
+}
 export interface GetWorkUnitResultsRequest {
     /**
      * <p>The ID of the plan query operation for which to get results.</p>

package/dist-types/protocols/Aws_restJson1.d.ts

@@ -21,6 +21,8 @@ import { GetQueryStateCommandInput, GetQueryStateCommandOutput } from "../comman
 import { GetQueryStatisticsCommandInput, GetQueryStatisticsCommandOutput } from "../commands/GetQueryStatisticsCommand";
 import { GetResourceLFTagsCommandInput, GetResourceLFTagsCommandOutput } from "../commands/GetResourceLFTagsCommand";
 import { GetTableObjectsCommandInput, GetTableObjectsCommandOutput } from "../commands/GetTableObjectsCommand";
+import { GetTemporaryGluePartitionCredentialsCommandInput, GetTemporaryGluePartitionCredentialsCommandOutput } from "../commands/GetTemporaryGluePartitionCredentialsCommand";
+import { GetTemporaryGlueTableCredentialsCommandInput, GetTemporaryGlueTableCredentialsCommandOutput } from "../commands/GetTemporaryGlueTableCredentialsCommand";
 import { GetWorkUnitResultsCommandInput, GetWorkUnitResultsCommandOutput } from "../commands/GetWorkUnitResultsCommand";
 import { GetWorkUnitsCommandInput, GetWorkUnitsCommandOutput } from "../commands/GetWorkUnitsCommand";
 import { GrantPermissionsCommandInput, GrantPermissionsCommandOutput } from "../commands/GrantPermissionsCommand";
@@ -63,6 +65,8 @@ export declare const serializeAws_restJson1GetQueryStateCommand: (input: GetQuer
 export declare const serializeAws_restJson1GetQueryStatisticsCommand: (input: GetQueryStatisticsCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
 export declare const serializeAws_restJson1GetResourceLFTagsCommand: (input: GetResourceLFTagsCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
 export declare const serializeAws_restJson1GetTableObjectsCommand: (input: GetTableObjectsCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
+export declare const serializeAws_restJson1GetTemporaryGluePartitionCredentialsCommand: (input: GetTemporaryGluePartitionCredentialsCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
+export declare const serializeAws_restJson1GetTemporaryGlueTableCredentialsCommand: (input: GetTemporaryGlueTableCredentialsCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
 export declare const serializeAws_restJson1GetWorkUnitResultsCommand: (input: GetWorkUnitResultsCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
 export declare const serializeAws_restJson1GetWorkUnitsCommand: (input: GetWorkUnitsCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
 export declare const serializeAws_restJson1GrantPermissionsCommand: (input: GrantPermissionsCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
@@ -105,6 +109,8 @@ export declare const deserializeAws_restJson1GetQueryStateCommand: (output: __Ht
 export declare const deserializeAws_restJson1GetQueryStatisticsCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<GetQueryStatisticsCommandOutput>;
 export declare const deserializeAws_restJson1GetResourceLFTagsCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<GetResourceLFTagsCommandOutput>;
 export declare const deserializeAws_restJson1GetTableObjectsCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<GetTableObjectsCommandOutput>;
+export declare const deserializeAws_restJson1GetTemporaryGluePartitionCredentialsCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<GetTemporaryGluePartitionCredentialsCommandOutput>;
+export declare const deserializeAws_restJson1GetTemporaryGlueTableCredentialsCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<GetTemporaryGlueTableCredentialsCommandOutput>;
 export declare const deserializeAws_restJson1GetWorkUnitResultsCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<GetWorkUnitResultsCommandOutput>;
 export declare const deserializeAws_restJson1GetWorkUnitsCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<GetWorkUnitsCommandOutput>;
 export declare const deserializeAws_restJson1GrantPermissionsCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<GrantPermissionsCommandOutput>;

package/dist-types/ts3.4/LakeFormation.d.ts

@@ -20,6 +20,8 @@ import { GetQueryStateCommandInput, GetQueryStateCommandOutput } from "./command
 import { GetQueryStatisticsCommandInput, GetQueryStatisticsCommandOutput } from "./commands/GetQueryStatisticsCommand";
 import { GetResourceLFTagsCommandInput, GetResourceLFTagsCommandOutput } from "./commands/GetResourceLFTagsCommand";
 import { GetTableObjectsCommandInput, GetTableObjectsCommandOutput } from "./commands/GetTableObjectsCommand";
+import { GetTemporaryGluePartitionCredentialsCommandInput, GetTemporaryGluePartitionCredentialsCommandOutput } from "./commands/GetTemporaryGluePartitionCredentialsCommand";
+import { GetTemporaryGlueTableCredentialsCommandInput, GetTemporaryGlueTableCredentialsCommandOutput } from "./commands/GetTemporaryGlueTableCredentialsCommand";
 import { GetWorkUnitResultsCommandInput, GetWorkUnitResultsCommandOutput } from "./commands/GetWorkUnitResultsCommand";
 import { GetWorkUnitsCommandInput, GetWorkUnitsCommandOutput } from "./commands/GetWorkUnitsCommand";
 import { GrantPermissionsCommandInput, GrantPermissionsCommandOutput } from "./commands/GrantPermissionsCommand";
@@ -129,6 +131,14 @@ export declare class LakeFormation extends LakeFormationClient {
     getTableObjects(args: GetTableObjectsCommandInput, cb: (err: any, data?: GetTableObjectsCommandOutput) => void): void;
     getTableObjects(args: GetTableObjectsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetTableObjectsCommandOutput) => void): void;
     
+    getTemporaryGluePartitionCredentials(args: GetTemporaryGluePartitionCredentialsCommandInput, options?: __HttpHandlerOptions): Promise<GetTemporaryGluePartitionCredentialsCommandOutput>;
+    getTemporaryGluePartitionCredentials(args: GetTemporaryGluePartitionCredentialsCommandInput, cb: (err: any, data?: GetTemporaryGluePartitionCredentialsCommandOutput) => void): void;
+    getTemporaryGluePartitionCredentials(args: GetTemporaryGluePartitionCredentialsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetTemporaryGluePartitionCredentialsCommandOutput) => void): void;
+    
+    getTemporaryGlueTableCredentials(args: GetTemporaryGlueTableCredentialsCommandInput, options?: __HttpHandlerOptions): Promise<GetTemporaryGlueTableCredentialsCommandOutput>;
+    getTemporaryGlueTableCredentials(args: GetTemporaryGlueTableCredentialsCommandInput, cb: (err: any, data?: GetTemporaryGlueTableCredentialsCommandOutput) => void): void;
+    getTemporaryGlueTableCredentials(args: GetTemporaryGlueTableCredentialsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetTemporaryGlueTableCredentialsCommandOutput) => void): void;
+    
     getWorkUnitResults(args: GetWorkUnitResultsCommandInput, options?: __HttpHandlerOptions): Promise<GetWorkUnitResultsCommandOutput>;
     getWorkUnitResults(args: GetWorkUnitResultsCommandInput, cb: (err: any, data?: GetWorkUnitResultsCommandOutput) => void): void;
     getWorkUnitResults(args: GetWorkUnitResultsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetWorkUnitResultsCommandOutput) => void): void;

package/dist-types/ts3.4/LakeFormationClient.d.ts

@@ -27,6 +27,8 @@ import { GetQueryStateCommandInput, GetQueryStateCommandOutput } from "./command
 import { GetQueryStatisticsCommandInput, GetQueryStatisticsCommandOutput } from "./commands/GetQueryStatisticsCommand";
 import { GetResourceLFTagsCommandInput, GetResourceLFTagsCommandOutput } from "./commands/GetResourceLFTagsCommand";
 import { GetTableObjectsCommandInput, GetTableObjectsCommandOutput } from "./commands/GetTableObjectsCommand";
+import { GetTemporaryGluePartitionCredentialsCommandInput, GetTemporaryGluePartitionCredentialsCommandOutput } from "./commands/GetTemporaryGluePartitionCredentialsCommand";
+import { GetTemporaryGlueTableCredentialsCommandInput, GetTemporaryGlueTableCredentialsCommandOutput } from "./commands/GetTemporaryGlueTableCredentialsCommand";
 import { GetWorkUnitResultsCommandInput, GetWorkUnitResultsCommandOutput } from "./commands/GetWorkUnitResultsCommand";
 import { GetWorkUnitsCommandInput, GetWorkUnitsCommandOutput } from "./commands/GetWorkUnitsCommand";
 import { GrantPermissionsCommandInput, GrantPermissionsCommandOutput } from "./commands/GrantPermissionsCommand";
@@ -48,8 +50,8 @@ import { UpdateLFTagCommandInput, UpdateLFTagCommandOutput } from "./commands/Up
 import { UpdateResourceCommandInput, UpdateResourceCommandOutput } from "./commands/UpdateResourceCommand";
 import { UpdateTableObjectsCommandInput, UpdateTableObjectsCommandOutput } from "./commands/UpdateTableObjectsCommand";
 import { UpdateTableStorageOptimizerCommandInput, UpdateTableStorageOptimizerCommandOutput } from "./commands/UpdateTableStorageOptimizerCommand";
-export declare type ServiceInputTypes = AddLFTagsToResourceCommandInput | BatchGrantPermissionsCommandInput | BatchRevokePermissionsCommandInput | CancelTransactionCommandInput | CommitTransactionCommandInput | CreateDataCellsFilterCommandInput | CreateLFTagCommandInput | DeleteDataCellsFilterCommandInput | DeleteLFTagCommandInput | DeleteObjectsOnCancelCommandInput | DeregisterResourceCommandInput | DescribeResourceCommandInput | DescribeTransactionCommandInput | ExtendTransactionCommandInput | GetDataLakeSettingsCommandInput | GetEffectivePermissionsForPathCommandInput | GetLFTagCommandInput | GetQueryStateCommandInput | GetQueryStatisticsCommandInput | GetResourceLFTagsCommandInput | GetTableObjectsCommandInput | GetWorkUnitResultsCommandInput | GetWorkUnitsCommandInput | GrantPermissionsCommandInput | ListDataCellsFilterCommandInput | ListLFTagsCommandInput | ListPermissionsCommandInput | ListResourcesCommandInput | ListTableStorageOptimizersCommandInput | ListTransactionsCommandInput | PutDataLakeSettingsCommandInput | RegisterResourceCommandInput | RemoveLFTagsFromResourceCommandInput | RevokePermissionsCommandInput | SearchDatabasesByLFTagsCommandInput | SearchTablesByLFTagsCommandInput | StartQueryPlanningCommandInput | StartTransactionCommandInput | UpdateLFTagCommandInput | UpdateResourceCommandInput | UpdateTableObjectsCommandInput | UpdateTableStorageOptimizerCommandInput;
-export declare type ServiceOutputTypes = AddLFTagsToResourceCommandOutput | BatchGrantPermissionsCommandOutput | BatchRevokePermissionsCommandOutput | CancelTransactionCommandOutput | CommitTransactionCommandOutput | CreateDataCellsFilterCommandOutput | CreateLFTagCommandOutput | DeleteDataCellsFilterCommandOutput | DeleteLFTagCommandOutput | DeleteObjectsOnCancelCommandOutput | DeregisterResourceCommandOutput | DescribeResourceCommandOutput | DescribeTransactionCommandOutput | ExtendTransactionCommandOutput | GetDataLakeSettingsCommandOutput | GetEffectivePermissionsForPathCommandOutput | GetLFTagCommandOutput | GetQueryStateCommandOutput | GetQueryStatisticsCommandOutput | GetResourceLFTagsCommandOutput | GetTableObjectsCommandOutput | GetWorkUnitResultsCommandOutput | GetWorkUnitsCommandOutput | GrantPermissionsCommandOutput | ListDataCellsFilterCommandOutput | ListLFTagsCommandOutput | ListPermissionsCommandOutput | ListResourcesCommandOutput | ListTableStorageOptimizersCommandOutput | ListTransactionsCommandOutput | PutDataLakeSettingsCommandOutput | RegisterResourceCommandOutput | RemoveLFTagsFromResourceCommandOutput | RevokePermissionsCommandOutput | SearchDatabasesByLFTagsCommandOutput | SearchTablesByLFTagsCommandOutput | StartQueryPlanningCommandOutput | StartTransactionCommandOutput | UpdateLFTagCommandOutput | UpdateResourceCommandOutput | UpdateTableObjectsCommandOutput | UpdateTableStorageOptimizerCommandOutput;
+export declare type ServiceInputTypes = AddLFTagsToResourceCommandInput | BatchGrantPermissionsCommandInput | BatchRevokePermissionsCommandInput | CancelTransactionCommandInput | CommitTransactionCommandInput | CreateDataCellsFilterCommandInput | CreateLFTagCommandInput | DeleteDataCellsFilterCommandInput | DeleteLFTagCommandInput | DeleteObjectsOnCancelCommandInput | DeregisterResourceCommandInput | DescribeResourceCommandInput | DescribeTransactionCommandInput | ExtendTransactionCommandInput | GetDataLakeSettingsCommandInput | GetEffectivePermissionsForPathCommandInput | GetLFTagCommandInput | GetQueryStateCommandInput | GetQueryStatisticsCommandInput | GetResourceLFTagsCommandInput | GetTableObjectsCommandInput | GetTemporaryGluePartitionCredentialsCommandInput | GetTemporaryGlueTableCredentialsCommandInput | GetWorkUnitResultsCommandInput | GetWorkUnitsCommandInput | GrantPermissionsCommandInput | ListDataCellsFilterCommandInput | ListLFTagsCommandInput | ListPermissionsCommandInput | ListResourcesCommandInput | ListTableStorageOptimizersCommandInput | ListTransactionsCommandInput | PutDataLakeSettingsCommandInput | RegisterResourceCommandInput | RemoveLFTagsFromResourceCommandInput | RevokePermissionsCommandInput | SearchDatabasesByLFTagsCommandInput | SearchTablesByLFTagsCommandInput | StartQueryPlanningCommandInput | StartTransactionCommandInput | UpdateLFTagCommandInput | UpdateResourceCommandInput | UpdateTableObjectsCommandInput | UpdateTableStorageOptimizerCommandInput;
+export declare type ServiceOutputTypes = AddLFTagsToResourceCommandOutput | BatchGrantPermissionsCommandOutput | BatchRevokePermissionsCommandOutput | CancelTransactionCommandOutput | CommitTransactionCommandOutput | CreateDataCellsFilterCommandOutput | CreateLFTagCommandOutput | DeleteDataCellsFilterCommandOutput | DeleteLFTagCommandOutput | DeleteObjectsOnCancelCommandOutput | DeregisterResourceCommandOutput | DescribeResourceCommandOutput | DescribeTransactionCommandOutput | ExtendTransactionCommandOutput | GetDataLakeSettingsCommandOutput | GetEffectivePermissionsForPathCommandOutput | GetLFTagCommandOutput | GetQueryStateCommandOutput | GetQueryStatisticsCommandOutput | GetResourceLFTagsCommandOutput | GetTableObjectsCommandOutput | GetTemporaryGluePartitionCredentialsCommandOutput | GetTemporaryGlueTableCredentialsCommandOutput | GetWorkUnitResultsCommandOutput | GetWorkUnitsCommandOutput | GrantPermissionsCommandOutput | ListDataCellsFilterCommandOutput | ListLFTagsCommandOutput | ListPermissionsCommandOutput | ListResourcesCommandOutput | ListTableStorageOptimizersCommandOutput | ListTransactionsCommandOutput | PutDataLakeSettingsCommandOutput | RegisterResourceCommandOutput | RemoveLFTagsFromResourceCommandOutput | RevokePermissionsCommandOutput | SearchDatabasesByLFTagsCommandOutput | SearchTablesByLFTagsCommandOutput | StartQueryPlanningCommandOutput | StartTransactionCommandOutput | UpdateLFTagCommandOutput | UpdateResourceCommandOutput | UpdateTableObjectsCommandOutput | UpdateTableStorageOptimizerCommandOutput;
 export interface ClientDefaults extends Partial<__SmithyResolvedConfiguration<__HttpHandlerOptions>> {
     
     requestHandler?: __HttpHandler;

package/dist-types/ts3.4/commands/GetTemporaryGluePartitionCredentialsCommand.d.ts

@@ -0,0 +1,17 @@
+import { Command as $Command } from "@aws-sdk/smithy-client";
+import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@aws-sdk/types";
+import { LakeFormationClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../LakeFormationClient";
+import { GetTemporaryGluePartitionCredentialsRequest, GetTemporaryGluePartitionCredentialsResponse } from "../models/models_0";
+export interface GetTemporaryGluePartitionCredentialsCommandInput extends GetTemporaryGluePartitionCredentialsRequest {
+}
+export interface GetTemporaryGluePartitionCredentialsCommandOutput extends GetTemporaryGluePartitionCredentialsResponse, __MetadataBearer {
+}
+
+export declare class GetTemporaryGluePartitionCredentialsCommand extends $Command<GetTemporaryGluePartitionCredentialsCommandInput, GetTemporaryGluePartitionCredentialsCommandOutput, LakeFormationClientResolvedConfig> {
+    readonly input: GetTemporaryGluePartitionCredentialsCommandInput;
+    constructor(input: GetTemporaryGluePartitionCredentialsCommandInput);
+    
+    resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: LakeFormationClientResolvedConfig, options?: __HttpHandlerOptions): Handler<GetTemporaryGluePartitionCredentialsCommandInput, GetTemporaryGluePartitionCredentialsCommandOutput>;
+    private serialize;
+    private deserialize;
+}

package/dist-types/ts3.4/commands/GetTemporaryGlueTableCredentialsCommand.d.ts

@@ -0,0 +1,17 @@
+import { Command as $Command } from "@aws-sdk/smithy-client";
+import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@aws-sdk/types";
+import { LakeFormationClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../LakeFormationClient";
+import { GetTemporaryGlueTableCredentialsRequest, GetTemporaryGlueTableCredentialsResponse } from "../models/models_0";
+export interface GetTemporaryGlueTableCredentialsCommandInput extends GetTemporaryGlueTableCredentialsRequest {
+}
+export interface GetTemporaryGlueTableCredentialsCommandOutput extends GetTemporaryGlueTableCredentialsResponse, __MetadataBearer {
+}
+
+export declare class GetTemporaryGlueTableCredentialsCommand extends $Command<GetTemporaryGlueTableCredentialsCommandInput, GetTemporaryGlueTableCredentialsCommandOutput, LakeFormationClientResolvedConfig> {
+    readonly input: GetTemporaryGlueTableCredentialsCommandInput;
+    constructor(input: GetTemporaryGlueTableCredentialsCommandInput);
+    
+    resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: LakeFormationClientResolvedConfig, options?: __HttpHandlerOptions): Handler<GetTemporaryGlueTableCredentialsCommandInput, GetTemporaryGlueTableCredentialsCommandOutput>;
+    private serialize;
+    private deserialize;
+}

package/dist-types/ts3.4/commands/index.d.ts

@@ -19,6 +19,8 @@ export * from "./GetQueryStateCommand";
 export * from "./GetQueryStatisticsCommand";
 export * from "./GetResourceLFTagsCommand";
 export * from "./GetTableObjectsCommand";
+export * from "./GetTemporaryGluePartitionCredentialsCommand";
+export * from "./GetTemporaryGlueTableCredentialsCommand";
 export * from "./GetWorkUnitResultsCommand";
 export * from "./GetWorkUnitsCommand";
 export * from "./GrantPermissionsCommand";

package/dist-types/ts3.4/models/models_0.d.ts

@@ -311,6 +311,15 @@ export declare namespace AlreadyExistsException {
     
     const filterSensitiveLog: (obj: AlreadyExistsException) => any;
 }
+
+export interface AuditContext {
+    
+    AdditionalAuditContext?: string;
+}
+export declare namespace AuditContext {
+    
+    const filterSensitiveLog: (obj: AuditContext) => any;
+}
 export declare enum Permission {
     ALL = "ALL",
     ALTER = "ALTER",
@@ -742,6 +751,12 @@ export interface DataLakeSettings {
     CreateTableDefaultPermissions?: PrincipalPermissions[];
     
     TrustedResourceOwners?: string[];
+    
+    AllowExternalDataFiltering?: boolean;
+    
+    ExternalDataFilteringAllowList?: DataLakePrincipal[];
+    
+    AuthorizedSessionTagValueList?: string[];
 }
 export declare namespace DataLakeSettings {
     
@@ -1039,6 +1054,92 @@ export declare namespace GetTableObjectsResponse {
     
     const filterSensitiveLog: (obj: GetTableObjectsResponse) => any;
 }
+
+export interface PartitionValueList {
+    
+    Values: string[] | undefined;
+}
+export declare namespace PartitionValueList {
+    
+    const filterSensitiveLog: (obj: PartitionValueList) => any;
+}
+export declare enum PermissionType {
+    CELL_FILTER_PERMISSION = "CELL_FILTER_PERMISSION",
+    COLUMN_PERMISSION = "COLUMN_PERMISSION"
+}
+export interface GetTemporaryGluePartitionCredentialsRequest {
+    
+    TableArn: string | undefined;
+    
+    Partition: PartitionValueList | undefined;
+    
+    Permissions?: (Permission | string)[];
+    
+    DurationSeconds?: number;
+    
+    AuditContext?: AuditContext;
+    
+    SupportedPermissionTypes: (PermissionType | string)[] | undefined;
+}
+export declare namespace GetTemporaryGluePartitionCredentialsRequest {
+    
+    const filterSensitiveLog: (obj: GetTemporaryGluePartitionCredentialsRequest) => any;
+}
+export interface GetTemporaryGluePartitionCredentialsResponse {
+    
+    AccessKeyId?: string;
+    
+    SecretAccessKey?: string;
+    
+    SessionToken?: string;
+    
+    Expiration?: Date;
+}
+export declare namespace GetTemporaryGluePartitionCredentialsResponse {
+    
+    const filterSensitiveLog: (obj: GetTemporaryGluePartitionCredentialsResponse) => any;
+}
+
+export interface PermissionTypeMismatchException extends __SmithyException, $MetadataBearer {
+    name: "PermissionTypeMismatchException";
+    $fault: "client";
+    
+    Message?: string;
+}
+export declare namespace PermissionTypeMismatchException {
+    
+    const filterSensitiveLog: (obj: PermissionTypeMismatchException) => any;
+}
+export interface GetTemporaryGlueTableCredentialsRequest {
+    
+    TableArn: string | undefined;
+    
+    Permissions?: (Permission | string)[];
+    
+    DurationSeconds?: number;
+    
+    AuditContext?: AuditContext;
+    
+    SupportedPermissionTypes: (PermissionType | string)[] | undefined;
+}
+export declare namespace GetTemporaryGlueTableCredentialsRequest {
+    
+    const filterSensitiveLog: (obj: GetTemporaryGlueTableCredentialsRequest) => any;
+}
+export interface GetTemporaryGlueTableCredentialsResponse {
+    
+    AccessKeyId?: string;
+    
+    SecretAccessKey?: string;
+    
+    SessionToken?: string;
+    
+    Expiration?: Date;
+}
+export declare namespace GetTemporaryGlueTableCredentialsResponse {
+    
+    const filterSensitiveLog: (obj: GetTemporaryGlueTableCredentialsResponse) => any;
+}
 export interface GetWorkUnitResultsRequest {
     
     QueryId: string | undefined;

package/dist-types/ts3.4/protocols/Aws_restJson1.d.ts

@@ -21,6 +21,8 @@ import { GetQueryStateCommandInput, GetQueryStateCommandOutput } from "../comman
 import { GetQueryStatisticsCommandInput, GetQueryStatisticsCommandOutput } from "../commands/GetQueryStatisticsCommand";
 import { GetResourceLFTagsCommandInput, GetResourceLFTagsCommandOutput } from "../commands/GetResourceLFTagsCommand";
 import { GetTableObjectsCommandInput, GetTableObjectsCommandOutput } from "../commands/GetTableObjectsCommand";
+import { GetTemporaryGluePartitionCredentialsCommandInput, GetTemporaryGluePartitionCredentialsCommandOutput } from "../commands/GetTemporaryGluePartitionCredentialsCommand";
+import { GetTemporaryGlueTableCredentialsCommandInput, GetTemporaryGlueTableCredentialsCommandOutput } from "../commands/GetTemporaryGlueTableCredentialsCommand";
 import { GetWorkUnitResultsCommandInput, GetWorkUnitResultsCommandOutput } from "../commands/GetWorkUnitResultsCommand";
 import { GetWorkUnitsCommandInput, GetWorkUnitsCommandOutput } from "../commands/GetWorkUnitsCommand";
 import { GrantPermissionsCommandInput, GrantPermissionsCommandOutput } from "../commands/GrantPermissionsCommand";
@@ -63,6 +65,8 @@ export declare const serializeAws_restJson1GetQueryStateCommand: (input: GetQuer
 export declare const serializeAws_restJson1GetQueryStatisticsCommand: (input: GetQueryStatisticsCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
 export declare const serializeAws_restJson1GetResourceLFTagsCommand: (input: GetResourceLFTagsCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
 export declare const serializeAws_restJson1GetTableObjectsCommand: (input: GetTableObjectsCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
+export declare const serializeAws_restJson1GetTemporaryGluePartitionCredentialsCommand: (input: GetTemporaryGluePartitionCredentialsCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
+export declare const serializeAws_restJson1GetTemporaryGlueTableCredentialsCommand: (input: GetTemporaryGlueTableCredentialsCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
 export declare const serializeAws_restJson1GetWorkUnitResultsCommand: (input: GetWorkUnitResultsCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
 export declare const serializeAws_restJson1GetWorkUnitsCommand: (input: GetWorkUnitsCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
 export declare const serializeAws_restJson1GrantPermissionsCommand: (input: GrantPermissionsCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
@@ -105,6 +109,8 @@ export declare const deserializeAws_restJson1GetQueryStateCommand: (output: __Ht
 export declare const deserializeAws_restJson1GetQueryStatisticsCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<GetQueryStatisticsCommandOutput>;
 export declare const deserializeAws_restJson1GetResourceLFTagsCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<GetResourceLFTagsCommandOutput>;
 export declare const deserializeAws_restJson1GetTableObjectsCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<GetTableObjectsCommandOutput>;
+export declare const deserializeAws_restJson1GetTemporaryGluePartitionCredentialsCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<GetTemporaryGluePartitionCredentialsCommandOutput>;
+export declare const deserializeAws_restJson1GetTemporaryGlueTableCredentialsCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<GetTemporaryGlueTableCredentialsCommandOutput>;
 export declare const deserializeAws_restJson1GetWorkUnitResultsCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<GetWorkUnitResultsCommandOutput>;
 export declare const deserializeAws_restJson1GetWorkUnitsCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<GetWorkUnitsCommandOutput>;
 export declare const deserializeAws_restJson1GrantPermissionsCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<GrantPermissionsCommandOutput>;

package/package.json

@@ -1,18 +1,17 @@
 {
   "name": "@aws-sdk/client-lakeformation",
   "description": "AWS SDK for JavaScript Lakeformation Client for Node.js, Browser and React Native",
-  "version": "3.45.0",
+  "version": "3.46.0",
   "scripts": {
     "build": "yarn build:cjs && yarn build:es && yarn build:types",
     "build:cjs": "tsc -p tsconfig.json",
-    "build:docs": "yarn clean:docs && typedoc ./",
+    "build:docs": "typedoc",
     "build:es": "tsc -p tsconfig.es.json",
     "build:types": "tsc -p tsconfig.types.json",
+    "build:types:downlevel": "downlevel-dts dist-types dist-types/ts3.4",
     "clean": "yarn clean:dist && yarn clean:docs",
-    "clean:dist": "rimraf ./dist",
-    "clean:docs": "rimraf ./docs",
-    "downlevel-dts": "downlevel-dts dist-types dist-types/ts3.4",
-    "test": "exit 0"
+    "clean:dist": "rimraf ./dist-*",
+    "clean:docs": "rimraf ./docs"
   },
   "main": "./dist-cjs/index.js",
   "types": "./dist-types/index.d.ts",
@@ -21,48 +20,42 @@
   "dependencies": {
     "@aws-crypto/sha256-browser": "2.0.0",
     "@aws-crypto/sha256-js": "2.0.0",
-    "@aws-sdk/client-sts": "3.45.0",
-    "@aws-sdk/config-resolver": "3.45.0",
-    "@aws-sdk/credential-provider-node": "3.45.0",
-    "@aws-sdk/fetch-http-handler": "3.40.0",
-    "@aws-sdk/hash-node": "3.40.0",
-    "@aws-sdk/invalid-dependency": "3.40.0",
-    "@aws-sdk/middleware-content-length": "3.40.0",
-    "@aws-sdk/middleware-host-header": "3.40.0",
-    "@aws-sdk/middleware-logger": "3.40.0",
-    "@aws-sdk/middleware-retry": "3.40.0",
-    "@aws-sdk/middleware-serde": "3.40.0",
-    "@aws-sdk/middleware-signing": "3.45.0",
-    "@aws-sdk/middleware-stack": "3.40.0",
-    "@aws-sdk/middleware-user-agent": "3.40.0",
-    "@aws-sdk/node-config-provider": "3.40.0",
-    "@aws-sdk/node-http-handler": "3.40.0",
-    "@aws-sdk/protocol-http": "3.40.0",
-    "@aws-sdk/smithy-client": "3.41.0",
-    "@aws-sdk/types": "3.40.0",
-    "@aws-sdk/url-parser": "3.40.0",
-    "@aws-sdk/util-base64-browser": "3.37.0",
-    "@aws-sdk/util-base64-node": "3.37.0",
-    "@aws-sdk/util-body-length-browser": "3.37.0",
-    "@aws-sdk/util-body-length-node": "3.37.0",
-    "@aws-sdk/util-user-agent-browser": "3.40.0",
-    "@aws-sdk/util-user-agent-node": "3.40.0",
-    "@aws-sdk/util-utf8-browser": "3.37.0",
-    "@aws-sdk/util-utf8-node": "3.37.0",
+    "@aws-sdk/client-sts": "3.46.0",
+    "@aws-sdk/config-resolver": "3.46.0",
+    "@aws-sdk/credential-provider-node": "3.46.0",
+    "@aws-sdk/fetch-http-handler": "3.46.0",
+    "@aws-sdk/hash-node": "3.46.0",
+    "@aws-sdk/invalid-dependency": "3.46.0",
+    "@aws-sdk/middleware-content-length": "3.46.0",
+    "@aws-sdk/middleware-host-header": "3.46.0",
+    "@aws-sdk/middleware-logger": "3.46.0",
+    "@aws-sdk/middleware-retry": "3.46.0",
+    "@aws-sdk/middleware-serde": "3.46.0",
+    "@aws-sdk/middleware-signing": "3.46.0",
+    "@aws-sdk/middleware-stack": "3.46.0",
+    "@aws-sdk/middleware-user-agent": "3.46.0",
+    "@aws-sdk/node-config-provider": "3.46.0",
+    "@aws-sdk/node-http-handler": "3.46.0",
+    "@aws-sdk/protocol-http": "3.46.0",
+    "@aws-sdk/smithy-client": "3.46.0",
+    "@aws-sdk/types": "3.46.0",
+    "@aws-sdk/url-parser": "3.46.0",
+    "@aws-sdk/util-base64-browser": "3.46.0",
+    "@aws-sdk/util-base64-node": "3.46.0",
+    "@aws-sdk/util-body-length-browser": "3.46.0",
+    "@aws-sdk/util-body-length-node": "3.46.0",
+    "@aws-sdk/util-user-agent-browser": "3.46.0",
+    "@aws-sdk/util-user-agent-node": "3.46.0",
+    "@aws-sdk/util-utf8-browser": "3.46.0",
+    "@aws-sdk/util-utf8-node": "3.46.0",
     "tslib": "^2.3.0"
   },
   "devDependencies": {
-    "@aws-sdk/service-client-documentation-generator": "3.38.0",
-    "@types/node": "^12.7.5",
-    "downlevel-dts": "0.7.0",
-    "jest": "^26.1.0",
-    "rimraf": "^3.0.0",
-    "ts-jest": "^26.4.1",
-    "typedoc": "^0.19.2",
-    "typescript": "~4.3.5"
+    "@aws-sdk/service-client-documentation-generator": "3.46.0",
+    "@types/node": "^12.7.5"
   },
   "engines": {
-    "node": ">=10.0.0"
+    "node": ">=12.0.0"
   },
   "typesVersions": {
     "<4.0": {