lakeformation

61 actions in the lakeformation service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.

lakeformation:AddLFTagsToResource

Tagging

Grants permission to attach Lake Formation tags to catalog resources

lakeformation:BatchGrantPermissions

Permissions management

Grants permission to data lake permissions to one or more principals in a batch

lakeformation:BatchRevokePermissions

Permissions management

Grants permission to revoke data lake permissions from one or more principals in a batch

lakeformation:CancelTransaction

Write

Grants permission to cancel the given transaction

lakeformation:CommitTransaction

Write

Grants permission to commit the given transaction

lakeformation:CreateDataCellsFilter

Write

Grants permission to create a Lake Formation data cell filter

lakeformation:CreateLakeFormationIdentityCenterConfiguration

Write

Grants permission to create an IAM Identity Center connection with Lake Formation to allow IAM Identity Center users and groups to access Data Catalog resources

lakeformation:CreateLakeFormationOptIn

Write

Grants permission to enforce Lake Formation permissions for the given databases, tables, and principals

lakeformation:CreateLFTag

Write

Grants permission to create a Lake Formation tag

lakeformation:CreateLFTagExpression

Write

Grants permission to create a Lake Formation tag expression

lakeformation:DeleteDataCellsFilter

Write

Grants permission to delete a Lake Formation data cell filter

lakeformation:DeleteLakeFormationIdentityCenterConfiguration

Write

Grants permission to delete an IAM Identity Center connection with Lake Formation

lakeformation:DeleteLakeFormationOptIn

Write

Grants permission to remove the Lake Formation permissions enforcement of the given databases, tables, and principals

lakeformation:DeleteLFTag

Write

Grants permission to delete a Lake Formation tag

lakeformation:DeleteLFTagExpression

Write

Grants permission to delete a Lake Formation expression

lakeformation:DeleteObjectsOnCancel

Write

Grants permission to delete the specified objects if the transaction is canceled

lakeformation:DeregisterResource

Write

Grants permission to deregister a registered location

lakeformation:DescribeLakeFormationIdentityCenterConfiguration

Read

Grants permission to describe the IAM Identity Center connection with Lake Formation

lakeformation:DescribeResource

Read

Grants permission to describe a registered location

lakeformation:DescribeTransaction

Read

Grants permission to get status of the given transaction

lakeformation:ExtendTransaction

Write

Grants permission to extend the timeout of the given transaction

lakeformation:GetDataAccess

Write

Grants permission to virtual data lake access

lakeformation:GetDataCellsFilter

Read

Grants permission to retrieve a Lake Formation data cell filter

lakeformation:GetDataLakePrincipal

Read

Grants permission to retrieve the identity of the invoking principal

lakeformation:GetDataLakeSettings

Read

Grants permission to retrieve data lake settings such as the list of data lake administrators and database and table default permissions

lakeformation:GetEffectivePermissionsForPath

Read

Grants permission to retrieve permissions attached to resources in the given path

lakeformation:GetLFTag

Read

Grants permission to retrieve a Lake Formation tag

lakeformation:GetLFTagExpression

Read

Grants permission to retrieve a Lake Formation tag expression

lakeformation:GetQueryState

Read

Grants permission to retrieve the state of the given query

lakeformation:GetQueryStatistics

Read

Grants permission to retrieve the statistics for the given query

lakeformation:GetResourceLFTags

Read

Grants permission to retrieve lakeformation tags on a catalog resource

lakeformation:GetTableObjects

Read

Grants permission to retrieve objects from a table

lakeformation:GetTemporaryGluePartitionCredentials

Read

Grants permission to get temporary credentials to access Glue partition data through Lake Formation

lakeformation:GetTemporaryGlueTableCredentials

Read

Grants permission to get temporary credentials to access Glue table data through Lake Formation

lakeformation:GetWorkUnitResults

Read

Grants permission to retrieve the results for the given work units

lakeformation:GetWorkUnits

Read

Grants permission to retrieve the work units for the given query

lakeformation:GrantPermissions

Permissions management

Grants permission to data lake permissions to a principal

lakeformation:ListDataCellsFilter

List

Grants permission to list cell filters

lakeformation:ListLakeFormationOptIns

List

Grants permission to retrieve the current list of resources and principals that are opt in to enforce Lake Formation permissions

lakeformation:ListLFTagExpressions

Read

Grants permission to list Lake Foramtion tag expressions

lakeformation:ListLFTags

Read

Grants permission to list Lake Formation tags

lakeformation:ListPermissions

List

Grants permission to list permissions filtered by principal or resource

lakeformation:ListResources

List

Grants permission to List registered locations

lakeformation:ListTableStorageOptimizers

List

Grants permission to list all the storage optimizers for the Governed table

lakeformation:ListTransactions

List

Grants permission to list all transactions in the system

lakeformation:PutDataLakeSettings

Permissions management

Grants permission to overwrite data lake settings such as the list of data lake administrators and database and table default permissions

lakeformation:RegisterResource

Write

Grants permission to register a new location to be managed by Lake Formation

lakeformation:RegisterResourceWithPrivilegedAccess

Write

Grants permission to register a new location to be managed by Lake Formation, with privileged access

lakeformation:RemoveLFTagsFromResource

Tagging

Grants permission to remove lakeformation tags from catalog resources

lakeformation:RevokePermissions

Permissions management

Grants permission to revoke data lake permissions from a principal

lakeformation:SearchDatabasesByLFTags

Read

Grants permission to list catalog databases with Lake Formation tags

lakeformation:SearchTablesByLFTags

Read

Grants permission to list catalog tables with Lake Formation tags

lakeformation:StartQueryPlanning

Write

Grants permission to initiate the planning of the given query

lakeformation:StartTransaction

Write

Grants permission to start a new transaction

lakeformation:UpdateDataCellsFilter

Write

Grants permission to update a Lake Formation data cell filter

lakeformation:UpdateLakeFormationIdentityCenterConfiguration

Write

Grants permission to update the IAM Identity Center connection parameters

lakeformation:UpdateLFTag

Write

Grants permission to update a Lake Formation tag

lakeformation:UpdateLFTagExpression

Write

Grants permission to update a Lake Formation expression

lakeformation:UpdateResource

Write

Grants permission to update a registered location

lakeformation:UpdateTableObjects

Write

Grants permission to add or delete the specified objects to or from a table

lakeformation:UpdateTableStorageOptimizer

Write

Grants permission to update the configuration of the storage optimizer for the Governed table