temporary_glue_table_credentials
Creates, updates, deletes, gets or lists a temporary_glue_table_credentials resource.
Overview
| Name | temporary_glue_table_credentials |
| Type | Resource |
| Id | aws.lakeformation.temporary_glue_table_credentials |
Fields
The following fields are returned by SELECT queries:
- get_temporary_glue_table_credentials
| Name | Datatype | Description |
|---|---|---|
access_key_id | string | The access key ID for the temporary credentials. |
expiration | string (date-time) | The date and time when the temporary credentials expire. |
secret_access_key | string | The secret key for the temporary credentials. |
session_token | string | The session token for the temporary credentials. |
vended_s3_path | array | The Amazon S3 path for the temporary credentials. |
Methods
The following methods are available for this resource:
| Name | Accessible by | Required Params | Optional Params | Description |
|---|---|---|---|---|
get_temporary_glue_table_credentials | select | region | Allows a caller in a secure environment to assume a role with permission to access Amazon S3. In order to vend such credentials, Lake Formation assumes the role associated with a registered location, for example an Amazon S3 bucket, with a scope down policy which restricts the access to a single prefix. To call this API, the role that the service assumes must have lakeformation:GetDataAccess permission on the resource. |
Parameters
Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.
| Name | Datatype | Description |
|---|---|---|
region | string | AWS region (default: us-east-1) |
SELECT examples
- get_temporary_glue_table_credentials
Allows a caller in a secure environment to assume a role with permission to access Amazon S3. In order to vend such credentials, Lake Formation assumes the role associated with a registered location, for example an Amazon S3 bucket, with a scope down policy which restricts the access to a single prefix. To call this API, the role that the service assumes must have lakeformation:GetDataAccess permission on the resource.
SELECT
access_key_id,
expiration,
secret_access_key,
session_token,
vended_s3_path
FROM aws.lakeformation.temporary_glue_table_credentials
WHERE region = '{{ region }}' -- required
;