404

[ Avaa Bypassed ]




Upload:

Command:

botdev@18.216.241.11: ~ $
**Example 1: To grant permissions to the principal on resources using LF-Tags**

The following ``grant-permissions`` example grants  ALL permissions to the principal on database resource that matches the LF-Tag policy. ::

    aws lakeformation grant-permissions \
        --cli-input-json file://input.json

Contents of ``input.json``::

    {
        "CatalogId": "123456789111",
        "Principal": {
            "DataLakePrincipalIdentifier": "arn:aws:iam::123456789111:user/lf-admin"
        },
        "Resource": {
            "LFTagPolicy": {
                "CatalogId": "123456789111",
                "ResourceType": "DATABASE",
                "Expression": [{
                    "TagKey": "usergroup",
                    "TagValues": [
                        "analyst",
                        "developer"
                    ]
                }]
            }
        },
        "Permissions": [
            "ALL"
        ],
        "PermissionsWithGrantOption": [
            "ALL"
        ]
    }

This command produces no output.

For more information, see `Granting and revoking permissions on Data Catalog resources <https://docs.aws.amazon.com/lake-formation/latest/dg/granting-catalog-permissions.html>`__ in the *AWS Lake Formation Developer Guide*.

**Example 2: To grant column level permissions to the principal**

The following ``grant-permissions`` example grants permission to select specific column to the principal. ::

    aws lakeformation grant-permissions \
        --cli-input-json file://input.json

Contents of ``input.json``::

    {
        "CatalogId": "123456789111",
        "Principal": {
            "DataLakePrincipalIdentifier": "arn:aws:iam::123456789111:user/lf-developer"
        },
        "Resource": {
            "TableWithColumns": {
                "CatalogId": "123456789111",
                "ColumnNames": ["p_end_date_sk"],
                "DatabaseName": "tpc",
                "Name": "dl_tpc_promotion"
            }
        },
        "Permissions": [
            "SELECT"
        ],
        "PermissionsWithGrantOption": []
    }

This command produces no output.

For more information, see `Granting and revoking permissions on Data Catalog resources <https://docs.aws.amazon.com/lake-formation/latest/dg/granting-catalog-permissions.html>`__ in the *AWS Lake Formation Developer Guide*.

**Example 3: To grant table permissions to the principal**

The following ``grant-permissions`` example grants select permission on all tables of given database to the principal. ::

    aws lakeformation grant-permissions \
        --cli-input-json file://input.json

Contents of ``input.json``::

    {
        "CatalogId": "123456789111",
        "Principal": {
            "DataLakePrincipalIdentifier": "arn:aws:iam::123456789111:user/lf-developer"
        },
        "Resource": {
            "Table": {
                "CatalogId": "123456789111",
                "DatabaseName": "tpc",
                "TableWildcard": {}
            }
        },
        "Permissions": [
            "SELECT"
        ],
        "PermissionsWithGrantOption": []
    }

This command produces no output.

For more information, see `Granting and revoking permissions on Data Catalog resources <https://docs.aws.amazon.com/lake-formation/latest/dg/granting-catalog-permissions.html>`__ in the *AWS Lake Formation Developer Guide*.

**Example 4: To grant permissions on LF-Tags to the principal**

The following ``grant-permissions`` example grants associate permission on LF-Tags to the principal. ::

    aws lakeformation grant-permissions \
        --cli-input-json file://input.json

Contents of ``input.json``::

    {
        "CatalogId": "123456789111",
        "Principal": {
            "DataLakePrincipalIdentifier": "arn:aws:iam::123456789111:user/lf-developer"
        },
        "Resource": {
            "LFTag": {
                "CatalogId": "123456789111",
                "TagKey": "category",
                "TagValues": [
                    "private", "public"
                ]
            }

        },
        "Permissions": [
            "ASSOCIATE"
        ],
        "PermissionsWithGrantOption": []
    }

This command produces no output.

For more information, see `Granting and revoking permissions on Data Catalog resources <https://docs.aws.amazon.com/lake-formation/latest/dg/granting-catalog-permissions.html>`__ in the *AWS Lake Formation Developer Guide*.

**Example 5: To grant permissions on data locations to the principal**

The following ``grant-permissions`` example grants permission on data location to the principal. ::

    aws lakeformation grant-permissions \
        --cli-input-json file://input.json

Contents of ``input.json``::

    {
        "CatalogId": "123456789111",
        "Principal": {
            "DataLakePrincipalIdentifier": "arn:aws:iam::123456789111:user/lf-developer"
        },
        "Resource": {
            "DataLocation": {
                "CatalogId": "123456789111",
                "ResourceArn": "arn:aws:s3:::lf-data-lake-123456789111"
            }
        },
        "Permissions": [
            "DATA_LOCATION_ACCESS"
        ],
        "PermissionsWithGrantOption": []
    }

This command produces no output.

For more information, see `Granting and revoking permissions on Data Catalog resources <https://docs.aws.amazon.com/lake-formation/latest/dg/granting-catalog-permissions.html>`__ in the *AWS Lake Formation Developer Guide*.

Filemanager

Name Type Size Permission Actions
add-lf-tags-to-resource.rst File 984 B 0644
batch-grant-permissions.rst File 3.19 KB 0644
batch-revoke-permissions.rst File 1.92 KB 0644
cancel-transaction.rst File 464 B 0644
commit-transaction.rst File 496 B 0644
create-data-cells-filter.rst File 2.89 KB 0644
create-lf-tag.rst File 528 B 0644
delete-data-cells-filter.rst File 667 B 0644
delete-lf-tag.rst File 451 B 0644
delete-objects-on-cancel.rst File 1 KB 0644
deregister-resource.rst File 591 B 0644
describe-transaction.rst File 794 B 0644
extend-transaction.rst File 464 B 0644
get-data-lake-settings.rst File 1.52 KB 0644
get-effective-permissions-for-path.rst File 3.48 KB 0644
get-lf-tag.rst File 620 B 0644
get-query-state.rst File 499 B 0644
get-query-statistics.rst File 932 B 0644
get-resource-lf-tags.rst File 1.08 KB 0644
get-table-objects.rst File 1.09 KB 0644
get-work-unit-results.rst File 583 B 0644
get-work-units.rst File 1.6 KB 0644
grant-permissions.rst File 5.5 KB 0644
list-data-cells-filter.rst File 1.92 KB 0644
list-permissions.rst File 6.71 KB 0644
list-resources.rst File 1.28 KB 0644
list-transactions.rst File 1.61 KB 0644
put-data-lake-settings.rst File 1.14 KB 0644
register-resource.rst File 1.4 KB 0644
remove-lf-tags-from-resource.rst File 983 B 0644
revoke-permissions.rst File 1.02 KB 0644
search-databases-by-lf-tags.rst File 1.11 KB 0644
search-tables-by-lf-tags.rst File 8.99 KB 0644
start-query-planning.rst File 800 B 0644
start-transaction.rst File 534 B 0644
update-lf-tag.rst File 494 B 0644
update-table-objects.rst File 1.07 KB 0644