@propulsionworks/cloudformation 0.0.1 → 0.1.0

package/out/exports/resources.generated/aws-lakeformation-datalakesettings.d.ts

@@ -0,0 +1,75 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+export type LakeFormationDataLakeSettings = ResourceDefinitionWithAttributes<"AWS::LakeFormation::DataLakeSettings", LakeFormationDataLakeSettingsProps, LakeFormationDataLakeSettingsAttribs>;
+/**
+ * The `AWS::LakeFormation::DataLakeSettings` resource is an AWS Lake Formation resource type that manages the data lake settings for your account.
+ */
+export type LakeFormationDataLakeSettingsProps = {
+    /**
+     * A list of AWS Lake Formation principals.
+     */
+    Admins?: Record<string, unknown> | undefined;
+    /**
+     * Whether to allow Amazon EMR clusters or other third-party query engines to access data managed by Lake Formation .
+     *
+     * If set to true, you allow Amazon EMR clusters or other third-party engines to access data in Amazon S3 locations that are registered with Lake Formation .
+     *
+     * If false or null, no third-party query engines will be able to access data in Amazon S3 locations that are registered with Lake Formation.
+     *
+     * For more information, see [External data filtering setting](https://docs.aws.amazon.com/lake-formation/latest/dg/initial-LF-setup.html#external-data-filter) .
+     */
+    AllowExternalDataFiltering?: boolean | undefined;
+    /**
+     * Specifies whether query engines and applications can get credentials without IAM session tags if the user has full table access. It provides query engines and applications performance benefits as well as simplifies data access. Amazon EMR on Amazon EC2 is able to leverage this setting.
+     *
+     * For more information, see [](https://docs.aws.amazon.com/lake-formation/latest/dg/using-cred-vending.html)
+     */
+    AllowFullTableExternalDataAccess?: boolean | undefined;
+    /**
+     * Lake Formation relies on a privileged process secured by Amazon EMR or the third party integrator to tag the user's role while assuming it. Lake Formation will publish the acceptable key-value pair, for example key = "LakeFormationTrustedCaller" and value = "TRUE" and the third party integrator must properly tag the temporary security credentials that will be used to call Lake Formation 's administrative API operations.
+     */
+    AuthorizedSessionTagValueList?: string[] | undefined;
+    /**
+     * Specifies whether access control on a newly created database is managed by Lake Formation permissions or exclusively by IAM permissions.
+     *
+     * A null value indicates that the access is controlled by Lake Formation permissions. `ALL` permissions assigned to `IAM_ALLOWED_PRINCIPALS` group indicates that the user's IAM permissions determine the access to the database. This is referred to as the setting "Use only IAM access control," and is to support backward compatibility with the AWS Glue permission model implemented by IAM permissions.
+     *
+     * The only permitted values are an empty array or an array that contains a single JSON object that grants `ALL` to `IAM_ALLOWED_PRINCIPALS` .
+     *
+     * For more information, see [Changing the default security settings for your data lake](https://docs.aws.amazon.com/lake-formation/latest/dg/change-settings.html) .
+     */
+    CreateDatabaseDefaultPermissions?: Record<string, unknown> | undefined;
+    /**
+     * Specifies whether access control on a newly created table is managed by Lake Formation permissions or exclusively by IAM permissions.
+     *
+     * A null value indicates that the access is controlled by Lake Formation permissions. `ALL` permissions assigned to `IAM_ALLOWED_PRINCIPALS` group indicate that the user's IAM permissions determine the access to the table. This is referred to as the setting "Use only IAM access control," and is to support the backward compatibility with the AWS Glue permission model implemented by IAM permissions.
+     *
+     * The only permitted values are an empty array or an array that contains a single JSON object that grants `ALL` permissions to `IAM_ALLOWED_PRINCIPALS` .
+     *
+     * For more information, see [Changing the default security settings for your data lake](https://docs.aws.amazon.com/lake-formation/latest/dg/change-settings.html) .
+     */
+    CreateTableDefaultPermissions?: Record<string, unknown> | undefined;
+    /**
+     * A list of the account IDs of AWS accounts with Amazon EMR clusters or third-party engines that are allwed to perform data filtering.
+     */
+    ExternalDataFilteringAllowList?: Record<string, unknown> | undefined;
+    /**
+     * Specifies whether the data lake settings are updated by adding new values to the current settings ( `APPEND` ) or by replacing the current settings with new settings ( `REPLACE` ).
+     *
+     * > If you choose `REPLACE` , your current data lake settings will be replaced with the new values in your template.
+     */
+    MutationType?: string | undefined;
+    /**
+     * A key-value map that provides an additional configuration on your data lake. `CrossAccountVersion` is the key you can configure in the `Parameters` field. Accepted values for the `CrossAccountVersion` key are 1, 2, 3, and 4.
+     */
+    Parameters?: Record<string, unknown> | undefined;
+    /**
+     * An array of UTF-8 strings.
+     *
+     * A list of the resource-owning account IDs that the caller's account can use to share their user access details (user ARNs). The user ARNs can be logged in the resource owner's CloudTrail log. You may want to specify this property when you are in a high-trust boundary, such as the same team or company.
+     */
+    TrustedResourceOwners?: string[] | undefined;
+};
+export type LakeFormationDataLakeSettingsAttribs = {
+    Id: string;
+};
+//# sourceMappingURL=aws-lakeformation-datalakesettings.d.ts.map

package/out/exports/resources.generated/aws-lakeformation-permissions.d.ts

@@ -0,0 +1,145 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+export type LakeFormationPermissions = ResourceDefinitionWithAttributes<"AWS::LakeFormation::Permissions", LakeFormationPermissionsProps, LakeFormationPermissionsAttribs>;
+/**
+ * The `AWS::LakeFormation::Permissions` resource represents the permissions that a principal has on an AWS Glue Data Catalog resource (such as AWS Glue database or AWS Glue tables). When you upload a permissions stack, the permissions are granted to the principal and when you remove the stack, the permissions are revoked from the principal. If you remove a stack, and the principal does not have the permissions referenced in the stack then AWS Lake Formation will throw an error because you can’t call revoke on non-existing permissions. To successfully remove the stack, you’ll need to regrant those permissions and then remove the stack.
+ *
+ * > New versions of AWS Lake Formation permission resources are now available. For more information, see: [AWS:LakeFormation::PrincipalPermissions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lakeformation-principalpermissions.html)
+ */
+export type LakeFormationPermissionsProps = {
+    /**
+     * The AWS Lake Formation principal.
+     */
+    DataLakePrincipal: DataLakePrincipal;
+    /**
+     * The permissions granted or revoked.
+     */
+    Permissions?: string[] | undefined;
+    /**
+     * Indicates the ability to grant permissions (as a subset of permissions granted).
+     */
+    PermissionsWithGrantOption?: string[] | undefined;
+    /**
+     * A structure for the resource.
+     */
+    Resource: Resource;
+};
+export type LakeFormationPermissionsAttribs = {
+    /**
+     * A unique identifier for the batch permissions request entry.
+     */
+    Id: string;
+};
+/**
+ * A wildcard object, consisting of an optional list of excluded column names or indexes.
+ */
+export type ColumnWildcard = {
+    /**
+     * Excludes column names. Any column with this name will be excluded.
+     */
+    ExcludedColumnNames?: string[] | undefined;
+};
+/**
+ * The Lake Formation principal.
+ */
+export type DataLakePrincipal = {
+    /**
+     * An identifier for the Lake Formation principal.
+     */
+    DataLakePrincipalIdentifier?: string | undefined;
+};
+/**
+ * A structure for a data location object where permissions are granted or revoked.
+ */
+export type DataLocationResource = {
+    /**
+     * The identifier for the Data Catalog . By default, it is the account ID of the caller.
+     */
+    CatalogId?: string | undefined;
+    /**
+     * The Amazon Resource Name (ARN) that uniquely identifies the data location resource.
+     */
+    S3Resource?: string | undefined;
+};
+/**
+ * A structure for the database object.
+ */
+export type DatabaseResource = {
+    /**
+     * The identifier for the Data Catalog . By default, it is the account ID of the caller.
+     */
+    CatalogId?: string | undefined;
+    /**
+     * The name of the database resource. Unique to the Data Catalog.
+     */
+    Name?: string | undefined;
+};
+/**
+ * A structure for the resource.
+ */
+export type Resource = {
+    /**
+     * A structure for a data location object where permissions are granted or revoked.
+     */
+    DataLocationResource?: DataLocationResource | undefined;
+    /**
+     * A structure for the database object.
+     */
+    DatabaseResource?: DatabaseResource | undefined;
+    /**
+     * A structure for the table object. A table is a metadata definition that represents your data. You can Grant and Revoke table privileges to a principal.
+     */
+    TableResource?: TableResource | undefined;
+    /**
+     * A structure for a table with columns object. This object is only used when granting a SELECT permission.
+     */
+    TableWithColumnsResource?: TableWithColumnsResource | undefined;
+};
+/**
+ * A structure for the table object. A table is a metadata definition that represents your data. You can Grant and Revoke table privileges to a principal.
+ */
+export type TableResource = {
+    /**
+     * The identifier for the Data Catalog . By default, it is the account ID of the caller.
+     */
+    CatalogId?: string | undefined;
+    /**
+     * The name of the database for the table. Unique to a Data Catalog. A database is a set of associated table definitions organized into a logical group. You can Grant and Revoke database privileges to a principal.
+     */
+    DatabaseName?: string | undefined;
+    /**
+     * The name of the table.
+     */
+    Name?: string | undefined;
+    /**
+     * An empty object representing all tables under a database. If this field is specified instead of the `Name` field, all tables under `DatabaseName` will have permission changes applied.
+     */
+    TableWildcard?: Record<string, unknown> | undefined;
+};
+/**
+ * A structure for a table with columns object. This object is only used when granting a SELECT permission.
+ *
+ * This object must take a value for at least one of `ColumnsNames` , `ColumnsIndexes` , or `ColumnsWildcard` .
+ */
+export type TableWithColumnsResource = {
+    /**
+     * The identifier for the Data Catalog . By default, it is the account ID of the caller.
+     */
+    CatalogId?: string | undefined;
+    /**
+     * The list of column names for the table. At least one of `ColumnNames` or `ColumnWildcard` is required.
+     */
+    ColumnNames?: string[] | undefined;
+    /**
+     * A wildcard specified by a `ColumnWildcard` object. At least one of `ColumnNames` or `ColumnWildcard` is required.
+     */
+    ColumnWildcard?: ColumnWildcard | undefined;
+    /**
+     * The name of the database for the table with columns resource. Unique to the Data Catalog. A database is a set of associated table definitions organized into a logical group. You can Grant and Revoke database privileges to a principal.
+     */
+    DatabaseName?: string | undefined;
+    /**
+     * The name of the table resource. A table is a metadata definition that represents your data. You can Grant and Revoke table privileges to a principal.
+     */
+    Name?: string | undefined;
+};
+//# sourceMappingURL=aws-lakeformation-permissions.d.ts.map

package/out/exports/resources.generated/aws-lakeformation-principalpermissions.d.ts

@@ -0,0 +1,241 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+export type LakeFormationPrincipalPermissions = ResourceDefinitionWithAttributes<"AWS::LakeFormation::PrincipalPermissions", LakeFormationPrincipalPermissionsProps, LakeFormationPrincipalPermissionsAttribs>;
+/**
+ * The `AWS::LakeFormation::PrincipalPermissions` resource represents the permissions that a principal has on a Data Catalog resource (such as AWS Glue databases or AWS Glue tables). When you create a `PrincipalPermissions` resource, the permissions are granted via the AWS Lake Formation `GrantPermissions` API operation. When you delete a `PrincipalPermissions` resource, the permissions on principal-resource pair are revoked via the AWS Lake Formation `RevokePermissions` API operation.
+ */
+export type LakeFormationPrincipalPermissionsProps = {
+    /**
+     * The identifier for the Data Catalog . By default, the account ID. The Data Catalog is the persistent metadata store. It contains database definitions, table definitions, and other control information to manage your Lake Formation environment.
+     */
+    Catalog?: string | undefined;
+    /**
+     * The permissions granted or revoked.
+     */
+    Permissions: Permission[];
+    /**
+     * Indicates the ability to grant permissions (as a subset of permissions granted).
+     */
+    PermissionsWithGrantOption: Permission[];
+    /**
+     * The principal to be granted a permission.
+     */
+    Principal: DataLakePrincipal;
+    /**
+     * The resource to be granted or revoked permissions.
+     */
+    Resource: Resource;
+};
+export type LakeFormationPrincipalPermissionsAttribs = {
+    /**
+     * Json encoding of the input principal. For example: `{"DataLakePrincipalIdentifier":"arn:aws:iam::123456789012:role/ExampleRole"}`
+     */
+    PrincipalIdentifier: string;
+    /**
+     * Json encoding of the input resource. For example: `{"Catalog":null,"Database":null,"Table":null,"TableWithColumns":null,"DataLocation":null,"DataCellsFilter":{"TableCatalogId":"123456789012","DatabaseName":"ExampleDatabase","TableName":"ExampleTable","Name":"ExampleFilter"},"LFTag":null,"LFTagPolicy":null}`
+     */
+    ResourceIdentifier: string;
+};
+/**
+ * A wildcard object, consisting of an optional list of excluded column names or indexes.
+ */
+export type ColumnWildcard = {
+    /**
+     * Excludes column names. Any column with this name will be excluded.
+     */
+    ExcludedColumnNames?: string[] | undefined;
+};
+/**
+ * A structure that describes certain columns on certain rows.
+ */
+export type DataCellsFilterResource = {
+    /**
+     * A database in the Data Catalog .
+     */
+    DatabaseName: string;
+    /**
+     * The name given by the user to the data filter cell.
+     */
+    Name: string;
+    /**
+     * The ID of the catalog to which the table belongs.
+     */
+    TableCatalogId: string;
+    /**
+     * The name of the table.
+     */
+    TableName: string;
+};
+/**
+ * The AWS Lake Formation principal.
+ */
+export type DataLakePrincipal = {
+    /**
+     * An identifier for the AWS Lake Formation principal.
+     */
+    DataLakePrincipalIdentifier?: string | undefined;
+};
+/**
+ * A structure for a data location object where permissions are granted or revoked.
+ */
+export type DataLocationResource = {
+    /**
+     * The identifier for the Data Catalog where the location is registered with AWS Lake Formation .
+     */
+    CatalogId: string;
+    /**
+     * The Amazon Resource Name (ARN) that uniquely identifies the data location resource.
+     */
+    ResourceArn: string;
+};
+/**
+ * A structure for the database object.
+ */
+export type DatabaseResource = {
+    /**
+     * The identifier for the Data Catalog. By default, it is the account ID of the caller.
+     */
+    CatalogId: string;
+    /**
+     * The name of the database resource. Unique to the Data Catalog.
+     */
+    Name: string;
+};
+/**
+ * The LF-tag key and values attached to a resource.
+ */
+export type LFTag = {
+    /**
+     * The key-name for the LF-tag.
+     */
+    TagKey?: string | undefined;
+    /**
+     * A list of possible values of the corresponding `TagKey` of an LF-tag key-value pair.
+     */
+    TagValues?: string[] | undefined;
+};
+/**
+ * A structure containing an LF-tag key and values for a resource.
+ */
+export type LFTagKeyResource = {
+    /**
+     * The identifier for the Data Catalog where the location is registered with Data Catalog .
+     */
+    CatalogId: string;
+    /**
+     * The key-name for the LF-tag.
+     */
+    TagKey: string;
+    /**
+     * A list of possible values for the corresponding `TagKey` of an LF-tag key-value pair.
+     */
+    TagValues: string[];
+};
+/**
+ * A list of LF-tag conditions that define a resource's LF-tag policy.
+ *
+ * A structure that allows an admin to grant user permissions on certain conditions. For example, granting a role access to all columns that do not have the LF-tag 'PII' in tables that have the LF-tag 'Prod'.
+ */
+export type LFTagPolicyResource = {
+    /**
+     * The identifier for the Data Catalog . The Data Catalog is the persistent metadata store. It contains database definitions, table definitions, and other control information to manage your AWS Lake Formation environment.
+     */
+    CatalogId: string;
+    /**
+     * A list of LF-tag conditions that apply to the resource's LF-tag policy.
+     */
+    Expression: LFTag[];
+    /**
+     * The resource type for which the LF-tag policy applies.
+     */
+    ResourceType: ResourceType;
+};
+export type Permission = "ALL" | "SELECT" | "ALTER" | "DROP" | "DELETE" | "INSERT" | "DESCRIBE" | "CREATE_DATABASE" | "CREATE_TABLE" | "DATA_LOCATION_ACCESS" | "CREATE_LF_TAG" | "ASSOCIATE" | "GRANT_WITH_LF_TAG_EXPRESSION";
+/**
+ * A structure for the resource.
+ */
+export type Resource = {
+    /**
+     * The identifier for the Data Catalog. By default, the account ID. The Data Catalog is the persistent metadata store. It contains database definitions, table definitions, and other control information to manage your AWS Lake Formation environment.
+     */
+    Catalog?: Record<string, unknown> | undefined;
+    /**
+     * A data cell filter.
+     */
+    DataCellsFilter?: DataCellsFilterResource | undefined;
+    /**
+     * The location of an Amazon S3 path where permissions are granted or revoked.
+     */
+    DataLocation?: DataLocationResource | undefined;
+    /**
+     * The database for the resource. Unique to the Data Catalog. A database is a set of associated table definitions organized into a logical group. You can Grant and Revoke database permissions to a principal.
+     */
+    Database?: DatabaseResource | undefined;
+    /**
+     * The LF-tag key and values attached to a resource.
+     */
+    LFTag?: LFTagKeyResource | undefined;
+    /**
+     * A list of LF-tag conditions that define a resource's LF-tag policy.
+     */
+    LFTagPolicy?: LFTagPolicyResource | undefined;
+    /**
+     * The table for the resource. A table is a metadata definition that represents your data. You can Grant and Revoke table privileges to a principal.
+     */
+    Table?: TableResource | undefined;
+    /**
+     * The table with columns for the resource. A principal with permissions to this resource can select metadata from the columns of a table in the Data Catalog and the underlying data in Amazon S3.
+     */
+    TableWithColumns?: TableWithColumnsResource | undefined;
+};
+export type ResourceType = "DATABASE" | "TABLE";
+/**
+ * A structure for the table object. A table is a metadata definition that represents your data. You can Grant and Revoke table privileges to a principal.
+ */
+export type TableResource = {
+    /**
+     * The identifier for the Data Catalog. By default, it is the account ID of the caller.
+     */
+    CatalogId: string;
+    /**
+     * The name of the database for the table. Unique to a Data Catalog. A database is a set of associated table definitions organized into a logical group. You can Grant and Revoke database privileges to a principal.
+     */
+    DatabaseName: string;
+    /**
+     * The name of the table.
+     */
+    Name?: string | undefined;
+    /**
+     * A wildcard object representing every table under a database.
+     *
+     * At least one of `TableResource$Name` or `TableResource$TableWildcard` is required.
+     */
+    TableWildcard?: Record<string, unknown> | undefined;
+};
+/**
+ * A structure for a table with columns object. This object is only used when granting a SELECT permission.
+ *
+ * This object must take a value for at least one of `ColumnsNames` , `ColumnsIndexes` , or `ColumnsWildcard` .
+ */
+export type TableWithColumnsResource = {
+    /**
+     * The identifier for the Data Catalog where the location is registered with AWS Lake Formation .
+     */
+    CatalogId: string;
+    /**
+     * The list of column names for the table. At least one of `ColumnNames` or `ColumnWildcard` is required.
+     */
+    ColumnNames?: string[] | undefined;
+    /**
+     * A wildcard specified by a `ColumnWildcard` object. At least one of `ColumnNames` or `ColumnWildcard` is required.
+     */
+    ColumnWildcard?: ColumnWildcard | undefined;
+    /**
+     * The name of the database for the table with columns resource. Unique to the Data Catalog. A database is a set of associated table definitions organized into a logical group. You can Grant and Revoke database privileges to a principal.
+     */
+    DatabaseName: string;
+    /**
+     * The name of the table resource. A table is a metadata definition that represents your data. You can Grant and Revoke table privileges to a principal.
+     */
+    Name: string;
+};
+//# sourceMappingURL=aws-lakeformation-principalpermissions.d.ts.map

package/out/exports/resources.generated/aws-lakeformation-resource.d.ts

@@ -0,0 +1,34 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+export type LakeFormationResource = ResourceDefinitionWithAttributes<"AWS::LakeFormation::Resource", LakeFormationResourceProps, LakeFormationResourceAttribs>;
+/**
+ * The `AWS::LakeFormation::Resource` represents the data (  buckets and folders) that is being registered with AWS Lake Formation . During a stack operation, AWS CloudFormation calls the AWS Lake Formation [`RegisterResource`](https://docs.aws.amazon.com/lake-formation/latest/dg/aws-lake-formation-api-credential-vending.html#aws-lake-formation-api-credential-vending-RegisterResource) API operation to register the resource. To remove a `Resource` type, AWS CloudFormation calls the AWS Lake Formation [`DeregisterResource`](https://docs.aws.amazon.com/lake-formation/latest/dg/aws-lake-formation-api-credential-vending.html#aws-lake-formation-api-credential-vending-DeregisterResource) API operation.
+ */
+export type LakeFormationResourceProps = {
+    /**
+     * Indicates whether the data access of tables pointing to the location can be managed by both Lake Formation permissions as well as Amazon S3 bucket policies.
+     */
+    HybridAccessEnabled?: boolean | undefined;
+    /**
+     * The Amazon Resource Name (ARN) of the resource.
+     */
+    ResourceArn: string;
+    /**
+     * The IAM role that registered a resource.
+     */
+    RoleArn?: string | undefined;
+    /**
+     * Designates a trusted caller, an IAM principal, by registering this caller with the Data Catalog .
+     */
+    UseServiceLinkedRole: boolean;
+    /**
+     * Allows Lake Formation to assume a role to access tables in a federated database.
+     */
+    WithFederation?: boolean | undefined;
+};
+export type LakeFormationResourceAttribs = {
+    /**
+     * An identifier for the catalog resource.
+     */
+    Id: string;
+};
+//# sourceMappingURL=aws-lakeformation-resource.d.ts.map

package/out/exports/resources.generated/aws-lakeformation-tag.d.ts

@@ -0,0 +1,26 @@
+import type { ResourceDefinition } from "../main.ts";
+export type LakeFormationTag = ResourceDefinition<"AWS::LakeFormation::Tag", LakeFormationTagProps>;
+/**
+ * The `AWS::LakeFormation::Tag` resource represents an LF-tag, which consists of a key and one or more possible values for the key. During a stack operation, AWS CloudFormation calls the AWS Lake Formation `CreateLFTag` API to create a tag, and `UpdateLFTag` API to update a tag resource, and a `DeleteLFTag` to delete it.
+ */
+export type LakeFormationTagProps = {
+    /**
+     * Catalog id string, not less than 1 or more than 255 bytes long, matching the [single-line string pattern](https://docs.aws.amazon.com/lake-formation/latest/dg/aws-lake-formation-api-aws-lake-formation-api-common.html) .
+     *
+     * The identifier for the Data Catalog . By default, the account ID. The Data Catalog is the persistent metadata store. It contains database definitions, table definitions, and other control information to manage your AWS Lake Formation environment.
+     */
+    CatalogId?: string | undefined;
+    /**
+     * UTF-8 string, not less than 1 or more than 255 bytes long, matching the [single-line string pattern](https://docs.aws.amazon.com/lake-formation/latest/dg/aws-lake-formation-api-aws-lake-formation-api-common.html) .
+     *
+     * The key-name for the LF-tag.
+     */
+    TagKey: string;
+    /**
+     * An array of UTF-8 strings, not less than 1 or more than 50 strings.
+     *
+     * A list of possible values of the corresponding `TagKey` of an LF-tag key-value pair.
+     */
+    TagValues: string[];
+};
+//# sourceMappingURL=aws-lakeformation-tag.d.ts.map

package/out/exports/resources.generated/aws-lakeformation-tagassociation.d.ts

@@ -0,0 +1,133 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+export type LakeFormationTagAssociation = ResourceDefinitionWithAttributes<"AWS::LakeFormation::TagAssociation", LakeFormationTagAssociationProps, LakeFormationTagAssociationAttribs>;
+/**
+ * The `AWS::LakeFormation::TagAssociation` resource represents an assignment of an LF-tag to a Data Catalog resource (database, table, or column). During a stack operation, CloudFormation calls AWS Lake Formation `AddLFTagsToResource` API to create a `TagAssociation` resource and calls the `RemoveLFTagsToResource` API to delete it.
+ */
+export type LakeFormationTagAssociationProps = {
+    /**
+     * A structure containing an LF-tag key-value pair.
+     */
+    LFTags: LFTagPair[];
+    /**
+     * UTF-8 string (valid values: `DATABASE | TABLE` ).
+     *
+     * The resource for which the LF-tag policy applies.
+     */
+    Resource: Resource;
+};
+export type LakeFormationTagAssociationAttribs = {
+    /**
+     * Json encoding of the input resource.
+     *
+     * **Examples** - Database: `{"Catalog":null,"Database":{"CatalogId":"123456789012","Name":"ExampleDbName"},"Table":null,"TableWithColumns":null}`
+     * - Table: `{"Catalog":null,"Database":null,"Table":{"CatalogId":"123456789012","DatabaseName":"ExampleDbName","Name":"ExampleTableName","TableWildcard":null},"TableWithColumns":null}`
+     * - Columns: `{"Catalog":null,"Database":null,"Table":null,"TableWithColumns":{"CatalogId":"123456789012","DatabaseName":"ExampleDbName","Name":"ExampleTableName","ColumnNames":["ExampleColName1","ExampleColName2"]}}`
+     */
+    ResourceIdentifier: string;
+    /**
+     * Json encoding of the input LFTags list.
+     *
+     * For example: `[{"CatalogId":null,"TagKey":"tagKey1","TagValues":null},{"CatalogId":null,"TagKey":"tagKey2","TagValues":null}]`
+     */
+    TagsIdentifier: string;
+};
+/**
+ * A structure for the database object.
+ */
+export type DatabaseResource = {
+    /**
+     * The identifier for the Data Catalog . By default, it should be the account ID of the caller.
+     */
+    CatalogId: string;
+    /**
+     * The name of the database resource. Unique to the Data Catalog.
+     */
+    Name: string;
+};
+/**
+ * A structure containing the catalog ID, tag key, and tag values of an LF-tag key-value pair.
+ */
+export type LFTagPair = {
+    /**
+     * The identifier for the Data Catalog . By default, it is the account ID of the caller.
+     */
+    CatalogId: string;
+    /**
+     * The key-name for the LF-tag.
+     */
+    TagKey: string;
+    /**
+     * A list of possible values of the corresponding `TagKey` of an LF-tag key-value pair.
+     */
+    TagValues: string[];
+};
+/**
+ * A structure for the resource.
+ */
+export type Resource = {
+    /**
+     * The identifier for the Data Catalog. By default, the account ID. The Data Catalog is the persistent metadata store. It contains database definitions, table definitions, and other control information to manage your AWS Lake Formation environment.
+     */
+    Catalog?: Record<string, unknown> | undefined;
+    /**
+     * The database for the resource. Unique to the Data Catalog. A database is a set of associated table definitions organized into a logical group. You can Grant and Revoke database permissions to a principal.
+     */
+    Database?: DatabaseResource | undefined;
+    /**
+     * The table for the resource. A table is a metadata definition that represents your data. You can Grant and Revoke table privileges to a principal.
+     */
+    Table?: TableResource | undefined;
+    /**
+     * The table with columns for the resource. A principal with permissions to this resource can select metadata from the columns of a table in the Data Catalog and the underlying data in Amazon S3.
+     */
+    TableWithColumns?: TableWithColumnsResource | undefined;
+};
+/**
+ * A structure for the table object. A table is a metadata definition that represents your data. You can Grant and Revoke table privileges to a principal.
+ */
+export type TableResource = {
+    /**
+     * The identifier for the Data Catalog . By default, it is the account ID of the caller.
+     */
+    CatalogId: string;
+    /**
+     * The name of the database for the table. Unique to a Data Catalog. A database is a set of associated table definitions organized into a logical group. You can Grant and Revoke database privileges to a principal.
+     */
+    DatabaseName: string;
+    /**
+     * The name of the table.
+     */
+    Name?: string | undefined;
+    /**
+     * A wildcard object representing every table under a database.This is an object with no properties that effectively behaves as a true or false depending on whether not it is passed as a parameter. The valid inputs for a property with this type in either yaml or json is null or {}.
+     *
+     * At least one of `TableResource$Name` or `TableResource$TableWildcard` is required.
+     */
+    TableWildcard?: Record<string, unknown> | undefined;
+};
+/**
+ * A structure for a table with columns object. This object is only used when granting a SELECT permission.
+ *
+ * This object must take a value for at least one of `ColumnsNames` , `ColumnsIndexes` , or `ColumnsWildcard` .
+ */
+export type TableWithColumnsResource = {
+    /**
+     * A wildcard object representing every table under a database.
+     *
+     * At least one of TableResource$Name or TableResource$TableWildcard is required.
+     */
+    CatalogId: string;
+    /**
+     * The list of column names for the table. At least one of `ColumnNames` or `ColumnWildcard` is required.
+     */
+    ColumnNames: string[];
+    /**
+     * The name of the database for the table with columns resource. Unique to the Data Catalog. A database is a set of associated table definitions organized into a logical group. You can Grant and Revoke database privileges to a principal.
+     */
+    DatabaseName: string;
+    /**
+     * The name of the table resource. A table is a metadata definition that represents your data. You can Grant and Revoke table privileges to a principal.
+     */
+    Name: string;
+};
+//# sourceMappingURL=aws-lakeformation-tagassociation.d.ts.map