Lake Formation

4 resource kinds. Generated from the operator's CRD schemas.

API Group: aws.konfig.io/v1alpha1

LakeFormationDataCellsFilter # CLOUD CONTROL · AWS::LakeFormation::DataCellsFilter

LakeFormationDataCellsFilter manages AWS::LakeFormation::DataCellsFilter through the AWS Cloud Control API.

kubectl get lakeformationdatacellsfilters · example on GitHub

Example

# LakeFormationDataCellsFilter — Lake Formation
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/lakeformation.html#lakeformationdatacellsfilter
apiVersion: aws.konfig.io/v1alpha1
kind: LakeFormationDataCellsFilter
metadata:
  name: example-lakeformationdatacellsfilter
  namespace: default
spec:
  columnNames:
  - example
  columnWildcard:
    excludedColumnNames:
    - example
  databaseName: example-lakeformationdatacellsfilter
  name: example-lakeformationdatacellsfilter
  providerRef:
    name: example-lakeformationdatacellsfilter
    region: us-east-1
  rowFilter:
    filterExpression: example
  tableCatalogId: example-id-x
  tableName: example-lakeformationdatacellsfilter

Spec

Field	Type	Required	Description
`columnNames`	array<string>	—	A list of columns to be included in this Data Cells Filter.
`columnWildcard`	object	—	An object representing the Data Cells Filter's Columns.
`columnWildcard.excludedColumnNames`	array<string>	—	A list of column names to be excluded from the Data Cells Filter.
`databaseName`	string	yes	The name of the Database that the Table resides in.
`name`	string	yes	The desired name of the Data Cells Filter.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`rowFilter`	object	—	An object representing the Data Cells Filter's Row Filter.
`rowFilter.allRowsWildcard`	object	—	An empty object representing a row wildcard.
`rowFilter.filterExpression`	string	—	A PartiQL predicate.
`tableCatalogId`	string	yes	The Catalog Id of the Table on which to create a Data Cells Filter.
`tableName`	string	yes	The name of the Table to create a Data Cells Filter for.

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.

LakeFormationPrincipalPermissions # CLOUD CONTROL · AWS::LakeFormation::PrincipalPermissions

LakeFormationPrincipalPermissions manages AWS::LakeFormation::PrincipalPermissions through the AWS Cloud Control API.

kubectl get lakeformationprincipalpermissions · example on GitHub

Example

# LakeFormationPrincipalPermissions — Lake Formation
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/lakeformation.html#lakeformationprincipalpermissions
apiVersion: aws.konfig.io/v1alpha1
kind: LakeFormationPrincipalPermissions
metadata:
  name: example-lakeformationprincipalpermissions
  namespace: default
spec:
  catalog: example
  permissions:
  - example
  permissionsWithGrantOption:
  - example
  principal:
    dataLakePrincipalIdentifier: example
  providerRef:
    name: example-lakeformationprincipalpermissions
    region: us-east-1
  resource:
    catalog:
      name: example-catalog
    dataCellsFilter:
      databaseName: example-lakeformationprincipalpermissions
      name: example-lakeformationprincipalpermissions
      tableCatalogId: example-id-x
      tableName: example-lakeformationprincipalpermissions
    dataLocation:
      catalogId: example-id-x
      resourceArn: arn:aws:iam::123456789012:role/example-role
    database:
      catalogId: example-id-x
      name: example-lakeformationprincipalpermissions
    lfTag:
      catalogId: example-id-x
      tagKey: example
      tagValues:
      - example
    lfTagPolicy:
      catalogId: example-id-x
      expression:
      - tagKey: example
        tagValues:
        - example
      resourceType: DATABASE
    table:
      catalogId: example-id-x
      databaseName: example-lakeformationprincipalpermissions
      name: example-lakeformationprincipalpermissions
    tableWithColumns:
      catalogId: example-id-x
      columnNames:
      - example
      columnWildcard:
        excludedColumnNames:
        - example
      databaseName: example-lakeformationprincipalpermissions
      name: example-lakeformationprincipalpermissions

Spec

Field	Type	Required	Description
`catalog`	string	—	The identifier for the GLUDC.
`permissions`	array<string>	yes	The permissions granted or revoked.
`permissionsWithGrantOption`	array<string>	yes	Indicates the ability to grant permissions (as a subset of permissions granted).
`principal`	object	yes	The principal to be granted a permission.
`principal.dataLakePrincipalIdentifier`	string	—	An identifier for the LFlong principal.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`resource`	object	yes	The resource to be granted or revoked permissions.
`resource.catalog`	object	—	The identifier for the Data Catalog.
`resource.catalog.id`	string	—
`resource.dataCellsFilter`	object	—	A data cell filter.
`resource.dataCellsFilter.databaseName`	string	yes	A database in the GLUDC.
`resource.dataCellsFilter.name`	string	yes	The name given by the user to the data filter cell.
`resource.dataCellsFilter.tableCatalogId`	string	yes	The ID of the catalog to which the table belongs.
`resource.dataCellsFilter.tableName`	string	yes	The name of the table.
`resource.dataLocation`	object	—	The location of an Amazon S3 path where permissions are granted or revoked.
`resource.dataLocation.catalogId`	string	yes	The identifier for the GLUDC where the location is registered with LFlong.
`resource.dataLocation.resourceArn`	string	yes	The Amazon Resource Name (ARN) that uniquely identifies the data location resource.
`resource.database`	object	—	The database for the resource.
`resource.database.catalogId`	string	yes	The identifier for the Data Catalog.
`resource.database.name`	string	yes	The name of the database resource.
`resource.lfTag`	object	—	The LF-tag key and values attached to a resource.
`resource.lfTag.catalogId`	string	yes	The identifier for the GLUDC where the location is registered with GLUDC.
`resource.lfTag.tagKey`	string	yes	The key-name for the LF-tag.
`resource.lfTag.tagValues`	array<string>	yes	A list of possible values for the corresponding ``TagKey`` of an LF-tag key-value pair.
`resource.lfTagPolicy`	object	—	A list of LF-tag conditions that define a resource's LF-tag policy.
`resource.lfTagPolicy.catalogId`	string	yes	The identifier for the GLUDC.
`resource.lfTagPolicy.expression`	array<object>	yes	A list of LF-tag conditions that apply to the resource's LF-tag policy.
`resource.lfTagPolicy.expression[].tagKey`	string	—	The key-name for the LF-tag.
`resource.lfTagPolicy.expression[].tagValues`	array<string>	—	A list of possible values of the corresponding ``TagKey`` of an LF-tag key-value pair.
`resource.lfTagPolicy.resourceType`	enum	yes	The resource type for which the LF-tag policy applies. Allowed: `DATABASE, TABLE`
`resource.table`	object	—	The table for the resource.
`resource.table.catalogId`	string	yes	The identifier for the Data Catalog.
`resource.table.databaseName`	string	yes	The name of the database for the table.
`resource.table.name`	string	—	The name of the table.
`resource.table.tableWildcard`	object	—	A wildcard object representing every table under a database.
`resource.tableWithColumns`	object	—	The table with columns for the resource.
`resource.tableWithColumns.catalogId`	string	yes	The identifier for the GLUDC where the location is registered with LFlong.
`resource.tableWithColumns.columnNames`	array<string>	—	The list of column names for the table.
`resource.tableWithColumns.columnWildcard`	object	—	A wildcard specified by a ``ColumnWildcard`` object.
`resource.tableWithColumns.columnWildcard.excludedColumnNames`	array<string>	—	Excludes column names.
`resource.tableWithColumns.databaseName`	string	yes	The name of the database for the table with columns resource.
`resource.tableWithColumns.name`	string	yes	The name of the table resource.

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`principalIdentifier`	string	—	Read-only: reported by AWS after creation.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.
`resourceIdentifier`	string	—	Read-only: reported by AWS after creation.

LakeFormationTag # CLOUD CONTROL · AWS::LakeFormation::Tag

LakeFormationTag manages AWS::LakeFormation::Tag through the AWS Cloud Control API.

kubectl get lakeformationtags · example on GitHub

Example

# LakeFormationTag — Lake Formation
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/lakeformation.html#lakeformationtag
apiVersion: aws.konfig.io/v1alpha1
kind: LakeFormationTag
metadata:
  name: example-lakeformationtag
  namespace: default
spec:
  providerRef:
    name: example-lakeformationtag
    region: us-east-1
  tagKey: example
  tagValues:
  - example

Spec

Field	Type	Required	Description
`catalogId`	string	—	The identifier for the Data Catalog.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`tagKey`	string	yes	The key-name for the LF-tag.
`tagValues`	array<string>	yes	A list of possible values an attribute can take.

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.

LakeFormationTagAssociation # CLOUD CONTROL · AWS::LakeFormation::TagAssociation

LakeFormationTagAssociation manages AWS::LakeFormation::TagAssociation through the AWS Cloud Control API.

kubectl get lakeformationtagassociations · example on GitHub

Example

# LakeFormationTagAssociation — Lake Formation
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/lakeformation.html#lakeformationtagassociation
apiVersion: aws.konfig.io/v1alpha1
kind: LakeFormationTagAssociation
metadata:
  name: example-lakeformationtagassociation
  namespace: default
spec:
  lfTags:
  - catalogId: example-id-x
    tagKey: example
    tagValues:
    - example
  providerRef:
    name: example-lakeformationtagassociation
    region: us-east-1
  resource:
    database:
      catalogId: example-id-x
      name: example-lakeformationtagassociation
    table:
      catalogId: example-id-x
      databaseName: example-lakeformationtagassociation
      name: example-lakeformationtagassociation
    tableWithColumns:
      catalogId: example-id-x
      columnNames:
      - example
      databaseName: example-lakeformationtagassociation
      name: example-lakeformationtagassociation

Spec

Field	Type	Required	Description
`lfTags`	array<object>	yes	List of Lake Formation Tags to associate with the Lake Formation Resource Create-only in AWS: changing it requires replacing the resource.
`lfTags[].catalogId`	string	yes
`lfTags[].tagKey`	string	yes
`lfTags[].tagValues`	array<string>	yes
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`resource`	object	yes	Resource to tag with the Lake Formation Tags Create-only in AWS: changing it requires replacing the resource.
`resource.catalog`	object	—
`resource.database`	object	—	LakeFormationTagAssociationDatabaseResource is a nested property type of AWS::LakeFormation::TagAssociation.
`resource.database.catalogId`	string	yes
`resource.database.name`	string	yes
`resource.table`	object	—	LakeFormationTagAssociationTableResource is a nested property type of AWS::LakeFormation::TagAssociation.
`resource.table.catalogId`	string	yes
`resource.table.databaseName`	string	yes
`resource.table.name`	string	—
`resource.table.tableWildcard`	object	—
`resource.tableWithColumns`	object	—	LakeFormationTagAssociationTableWithColumnsResource is a nested property type of AWS::LakeFormation::TagAssociation.
`resource.tableWithColumns.catalogId`	string	yes
`resource.tableWithColumns.columnNames`	array<string>	yes
`resource.tableWithColumns.databaseName`	string	yes
`resource.tableWithColumns.name`	string	yes

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.
`resourceIdentifier`	string	—	Unique string identifying the resource.
`tagsIdentifier`	string	—	Unique string identifying the resource's tags.