AWS Fundamentals Logo
AWS Fundamentals
L1 ConstructAWS::LakeFormation::Permissions

CfnPermissions

The `AWS::LakeFormation::Permissions` resource represents the permissions that a principal has on an AWS Glue Data Catalog resource (such as AWS Glue database or AWS Glue tables). When you upload a permissions stack, the permissions are granted to the principal and when you remove the stack, the permissions are revoked from the principal. If you remove a stack, and the principal does not have the permissions referenced in the stack then AWS Lake Formation will throw an error because you can’t call revoke on non-existing permissions. To successfully remove the stack, you’ll need to regrant those permissions and then remove the stack. > New versions of AWS Lake Formation permission resources are now available. For more information, see: [AWS:LakeFormation::PrincipalPermissions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lakeformation-principalpermissions.html)

Import

import { CfnPermissions } from 'aws-cdk-lib/aws-lakeformation';

Or use the module namespace:

import * as lakeformation from 'aws-cdk-lib/aws-lakeformation';
// lakeformation.CfnPermissions

Properties

Configuration passed to the constructor as CfnPermissionsProps.

dataLakePrincipalRequired
IResolvable | DataLakePrincipalProperty

The AWS Lake Formation principal.

resourceRequired
IResolvable | ResourceProperty

A structure for the resource.

permissionsOptional
string[]

The permissions granted or revoked.

permissionsWithGrantOptionOptional
string[]

Indicates the ability to grant permissions (as a subset of permissions granted).

CloudFormation Resource

This L1 construct maps directly to the following CloudFormation resource type.

Learn AWS the Practical Way

Our bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.

Subscribe to Newsletter