Skip to main content

temporary_glue_table_credentials

Creates, updates, deletes, gets or lists a temporary_glue_table_credentials resource.

Overview

Nametemporary_glue_table_credentials
TypeResource
Idaws.lakeformation.temporary_glue_table_credentials

Fields

The following fields are returned by SELECT queries:

NameDatatypeDescription
access_key_idstringThe access key ID for the temporary credentials.
expirationstring (date-time)The date and time when the temporary credentials expire.
secret_access_keystringThe secret key for the temporary credentials.
session_tokenstringThe session token for the temporary credentials.
vended_s3_patharrayThe Amazon S3 path for the temporary credentials.

Methods

The following methods are available for this resource:

NameAccessible byRequired ParamsOptional ParamsDescription
get_temporary_glue_table_credentialsselectregionAllows a caller in a secure environment to assume a role with permission to access Amazon S3. In order to vend such credentials, Lake Formation assumes the role associated with a registered location, for example an Amazon S3 bucket, with a scope down policy which restricts the access to a single prefix. To call this API, the role that the service assumes must have lakeformation:GetDataAccess permission on the resource.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

NameDatatypeDescription
regionstringAWS region (default: us-east-1)

SELECT examples

Allows a caller in a secure environment to assume a role with permission to access Amazon S3. In order to vend such credentials, Lake Formation assumes the role associated with a registered location, for example an Amazon S3 bucket, with a scope down policy which restricts the access to a single prefix. To call this API, the role that the service assumes must have lakeformation:GetDataAccess permission on the resource.

SELECT
access_key_id,
expiration,
secret_access_key,
session_token,
vended_s3_path
FROM aws.lakeformation.temporary_glue_table_credentials
WHERE region = '{{ region }}' -- required
;