Lake Formation
Prefix lakeformation, 69 actions · Domain Analytics
3 AWS managed policies. 0 have reviewed guidance; the rest have authoritative permission data pending editorial review.
User access (1)
Operator and limited (1)
Service roles (1)
Also grants Lake Formation actions (33)
- AdministratorAccess
- AIDevOpsAgentAccessPolicy
- AIDevOpsAgentActionsPolicy
- AIOpsAssistantPolicy
- AmazonAthenaFullAccess
- AmazonDataZoneEnvironmentRolePermissionsBoundary
- AmazonDataZoneProjectDeploymentPermissionsBoundary
- AmazonDataZoneProjectRolePermissionsBoundary
- AmazonDataZoneSageMakerEnvironmentRolePermissionsBoundary
- AmazonRedshiftServiceLinkedRolePolicy
- AmazonSecurityLakeAdministrator
- AssuranceServiceRolePolicy
- AWS_ConfigRole
- AWSCODAPermissionsBoundary
- AWSConfigServiceRolePolicy
- AWSGlueDataBrewServiceRole
- AWSMcpServiceActionsFullAccess
- AWSQuicksightAthenaAccess
- AWSResourceExplorerServiceRolePolicy
- AWSSupportServiceRolePolicy
- AWSWellArchitectedAgentResourceScanningServiceRolePolicy
- CloudTrailServiceRolePolicy
- PowerUserAccess
- ReadOnlyAccess
- SageMakerStudioAdminIAMDefaultExecutionPolicy
- SageMakerStudioAdminIAMPermissiveExecutionPolicy
- SageMakerStudioProjectProvisioningRolePolicy
- SageMakerStudioProjectUserRolePermissionsBoundary
- SageMakerStudioProjectUserRolePolicy
- SageMakerStudioUserIAMDefaultExecutionPolicy
- SageMakerStudioUserIAMPermissiveExecutionPolicy
- SecurityLakeResourceManagementServiceRolePolicy
- WellArchitectedAgentResourceScanning
addlftagstoresource attachrlspolicy batchgrantpermissions batchrevokepermissions canceltransaction committransaction createdatacellsfilter createlftag createlftagexpression createlakeformationidentitycenterconfiguration createlakeformationoptin createrlspolicy deletedatacellsfilter deletelftag deletelftagexpression deletelakeformationidentitycenterconfiguration deletelakeformationoptin deleteobjectsoncancel deleterlspolicy deregisterresource describelakeformationidentitycenterconfiguration describeresource describetransaction detachrlspolicy extendtransaction getdataaccess getdatacellsfilter getdatalakeprincipal getdatalakesettings geteffectivepermissionsforpath getlftag getlftagexpression getquerystate getquerystatistics getrlspolicy getresourcelftags gettableobjects gettemporarygluepartitioncredentials gettemporarygluetablecredentials getworkunitresults getworkunits grantpermissions listdatacellsfilter listlftagexpressions listlftags listlakeformationoptins listpermissions listrlspolicies listrlspolicyattachments listresources listtablestorageoptimizers listtransactions putdatalakesettings registerresource registerresourcewithprivilegedaccess removelftagsfromresource revokepermissions searchdatabasesbylftags searchtablesbylftags startqueryplanning starttransaction updatedatacellsfilter updatelftag updatelftagexpression updatelakeformationidentitycenterconfiguration updaterlspolicy updateresource updatetableobjects updatetablestorageoptimizer
Actions (69)
| Action | Access level | Policies granting without limits | Policies granting with resource or condition limits |
|---|---|---|---|
| lakeformation:AddLFTagsToResource | Tagging | 5 | 1 |
| lakeformation:AttachRLSPolicy | Permissions management | 5 | 1 |
| lakeformation:BatchGrantPermissions | Permissions management | 13 | 1 |
| lakeformation:BatchRevokePermissions | Permissions management | 13 | 1 |
| lakeformation:CancelTransaction | Write | 5 | 1 |
| lakeformation:CommitTransaction | Write | 5 | 1 |
| lakeformation:CreateDataCellsFilter | Write | 9 | 1 |
| lakeformation:CreateLFTag | Write | 5 | 1 |
| lakeformation:CreateLFTagExpression | Write | 5 | 1 |
| lakeformation:CreateLakeFormationIdentityCenterConfiguration | Write | 6 | 1 |
| lakeformation:CreateLakeFormationOptIn | Write | 8 | 1 |
| lakeformation:CreateRLSPolicy | Write | 5 | 1 |
| lakeformation:DeleteDataCellsFilter | Write | 9 | 1 |
| lakeformation:DeleteLFTag | Write | 5 | 1 |
| lakeformation:DeleteLFTagExpression | Write | 5 | 1 |
| lakeformation:DeleteLakeFormationIdentityCenterConfiguration | Write | 6 | 1 |
| lakeformation:DeleteLakeFormationOptIn | Write | 8 | 1 |
| lakeformation:DeleteObjectsOnCancel | Write | 5 | 1 |
| lakeformation:DeleteRLSPolicy | Write | 5 | 1 |
| lakeformation:DeregisterResource | Write | 9 | 3 |
| lakeformation:DescribeLakeFormationIdentityCenterConfiguration | Read | 13 | 3 |
| lakeformation:DescribeResource | Read | 19 | 3 |
| lakeformation:DescribeTransaction | Read | 9 | 1 |
| lakeformation:DetachRLSPolicy | Permissions management | 5 | 1 |
| lakeformation:ExtendTransaction | Write | 5 | 1 |
| lakeformation:GetDataAccess | Write | 17 | 4 |
| lakeformation:GetDataCellsFilter | Read | 10 | 1 |
| lakeformation:GetDataLakePrincipal | Read | 6 | 1 |
| lakeformation:GetDataLakeSettings | Read | 17 | 3 |
| lakeformation:GetEffectivePermissionsForPath | Read | 7 | 1 |
| lakeformation:GetLFTag | Read | 10 | 2 |
| lakeformation:GetLFTagExpression | Read | 6 | 1 |
| lakeformation:GetQueryState | Read | 6 | 1 |
| lakeformation:GetQueryStatistics | Read | 6 | 1 |
| lakeformation:GetRLSPolicy | Read | 5 | 1 |
| lakeformation:GetResourceLFTags | Read | 13 | 1 |
| lakeformation:GetTableObjects | Read | 5 | 1 |
| lakeformation:GetTemporaryGluePartitionCredentials | Read | 5 | 1 |
| lakeformation:GetTemporaryGlueTableCredentials | Read | 5 | 1 |
| lakeformation:GetWorkUnitResults | Read | 5 | 1 |
| lakeformation:GetWorkUnits | Read | 5 | 1 |
| lakeformation:GrantPermissions | Permissions management | 13 | 3 |
| lakeformation:ListDataCellsFilter | List | 16 | 2 |
| lakeformation:ListLFTagExpressions | Read | 9 | 1 |
| lakeformation:ListLFTags | Read | 10 | 2 |
| lakeformation:ListLakeFormationOptIns | List | 12 | 1 |
| lakeformation:ListPermissions | List | 24 | 3 |
| lakeformation:ListRLSPolicies | List | 8 | 1 |
| lakeformation:ListRLSPolicyAttachments | List | 8 | 1 |
| lakeformation:ListResources | List | 18 | 4 |
| lakeformation:ListTableStorageOptimizers | List | 9 | 1 |
| lakeformation:ListTransactions | List | 8 | 1 |
| lakeformation:PutDataLakeSettings | Permissions management | 10 | 1 |
| lakeformation:RegisterResource | Write | 10 | 3 |
| lakeformation:RegisterResourceWithPrivilegedAccess | Write | 5 | 1 |
| lakeformation:RemoveLFTagsFromResource | Tagging | 5 | 1 |
| lakeformation:RevokePermissions | Permissions management | 13 | 2 |
| lakeformation:SearchDatabasesByLFTags | Read | 7 | 1 |
| lakeformation:SearchTablesByLFTags | Read | 7 | 1 |
| lakeformation:StartQueryPlanning | Write | 5 | 1 |
| lakeformation:StartTransaction | Write | 5 | 1 |
| lakeformation:UpdateDataCellsFilter | Write | 9 | 1 |
| lakeformation:UpdateLFTag | Write | 5 | 1 |
| lakeformation:UpdateLFTagExpression | Write | 5 | 1 |
| lakeformation:UpdateLakeFormationIdentityCenterConfiguration | Write | 6 | 1 |
| lakeformation:UpdateRLSPolicy | Write | 5 | 1 |
| lakeformation:UpdateResource | Write | 5 | 1 |
| lakeformation:UpdateTableObjects | Write | 5 | 1 |
| lakeformation:UpdateTableStorageOptimizer | Write | 5 | 1 |