@Generated(value="com.amazonaws:aws-java-sdk-code-generator") public class DataLakeSettings extends Object implements Serializable, Cloneable, StructuredPojo
A structure representing a list of Lake Formation principals designated as data lake administrators and lists of principal permission entries for default create database and default create table permissions.
| Constructor and Description |
|---|
DataLakeSettings() |
| Modifier and Type | Method and Description |
|---|---|
DataLakeSettings |
clone() |
boolean |
equals(Object obj) |
List<PrincipalPermissions> |
getCreateDatabaseDefaultPermissions()
Specifies whether access control on newly created database is managed by Lake Formation permissions or
exclusively by IAM permissions.
|
List<PrincipalPermissions> |
getCreateTableDefaultPermissions()
Specifies whether access control on newly created table is managed by Lake Formation permissions or exclusively
by IAM permissions.
|
List<DataLakePrincipal> |
getDataLakeAdmins()
A list of Lake Formation principals.
|
List<String> |
getTrustedResourceOwners()
A list of the resource-owning account IDs that the caller's account can use to share their user access details
(user ARNs).
|
int |
hashCode() |
void |
marshall(ProtocolMarshaller protocolMarshaller) |
void |
setCreateDatabaseDefaultPermissions(Collection<PrincipalPermissions> createDatabaseDefaultPermissions)
Specifies whether access control on newly created database is managed by Lake Formation permissions or
exclusively by IAM permissions.
|
void |
setCreateTableDefaultPermissions(Collection<PrincipalPermissions> createTableDefaultPermissions)
Specifies whether access control on newly created table is managed by Lake Formation permissions or exclusively
by IAM permissions.
|
void |
setDataLakeAdmins(Collection<DataLakePrincipal> dataLakeAdmins)
A list of Lake Formation principals.
|
void |
setTrustedResourceOwners(Collection<String> trustedResourceOwners)
A list of the resource-owning account IDs that the caller's account can use to share their user access details
(user ARNs).
|
String |
toString()
Returns a string representation of this object.
|
DataLakeSettings |
withCreateDatabaseDefaultPermissions(Collection<PrincipalPermissions> createDatabaseDefaultPermissions)
Specifies whether access control on newly created database is managed by Lake Formation permissions or
exclusively by IAM permissions.
|
DataLakeSettings |
withCreateDatabaseDefaultPermissions(PrincipalPermissions... createDatabaseDefaultPermissions)
Specifies whether access control on newly created database is managed by Lake Formation permissions or
exclusively by IAM permissions.
|
DataLakeSettings |
withCreateTableDefaultPermissions(Collection<PrincipalPermissions> createTableDefaultPermissions)
Specifies whether access control on newly created table is managed by Lake Formation permissions or exclusively
by IAM permissions.
|
DataLakeSettings |
withCreateTableDefaultPermissions(PrincipalPermissions... createTableDefaultPermissions)
Specifies whether access control on newly created table is managed by Lake Formation permissions or exclusively
by IAM permissions.
|
DataLakeSettings |
withDataLakeAdmins(Collection<DataLakePrincipal> dataLakeAdmins)
A list of Lake Formation principals.
|
DataLakeSettings |
withDataLakeAdmins(DataLakePrincipal... dataLakeAdmins)
A list of Lake Formation principals.
|
DataLakeSettings |
withTrustedResourceOwners(Collection<String> trustedResourceOwners)
A list of the resource-owning account IDs that the caller's account can use to share their user access details
(user ARNs).
|
DataLakeSettings |
withTrustedResourceOwners(String... trustedResourceOwners)
A list of the resource-owning account IDs that the caller's account can use to share their user access details
(user ARNs).
|
public List<DataLakePrincipal> getDataLakeAdmins()
A list of Lake Formation principals. Supported principals are IAM users or IAM roles.
public void setDataLakeAdmins(Collection<DataLakePrincipal> dataLakeAdmins)
A list of Lake Formation principals. Supported principals are IAM users or IAM roles.
dataLakeAdmins - A list of Lake Formation principals. Supported principals are IAM users or IAM roles.public DataLakeSettings withDataLakeAdmins(DataLakePrincipal... dataLakeAdmins)
A list of Lake Formation principals. Supported principals are IAM users or IAM roles.
NOTE: This method appends the values to the existing list (if any). Use
setDataLakeAdmins(java.util.Collection) or withDataLakeAdmins(java.util.Collection) if you want
to override the existing values.
dataLakeAdmins - A list of Lake Formation principals. Supported principals are IAM users or IAM roles.public DataLakeSettings withDataLakeAdmins(Collection<DataLakePrincipal> dataLakeAdmins)
A list of Lake Formation principals. Supported principals are IAM users or IAM roles.
dataLakeAdmins - A list of Lake Formation principals. Supported principals are IAM users or IAM roles.public List<PrincipalPermissions> getCreateDatabaseDefaultPermissions()
Specifies whether access control on newly created database is managed by Lake Formation permissions or exclusively by IAM permissions. You can override this default setting when you create a database.
A null value indicates access control by Lake Formation permissions. A value that assigns ALL to IAM_ALLOWED_PRINCIPALS indicates access control by IAM permissions. This is referred to as the setting "Use only IAM access control," and is for backward compatibility with the Glue permission model implemented by IAM permissions.
The only permitted values are an empty array or an array that contains a single JSON object that grants ALL to IAM_ALLOWED_PRINCIPALS.
For more information, see Changing the Default Security Settings for Your Data Lake.
A null value indicates access control by Lake Formation permissions. A value that assigns ALL to IAM_ALLOWED_PRINCIPALS indicates access control by IAM permissions. This is referred to as the setting "Use only IAM access control," and is for backward compatibility with the Glue permission model implemented by IAM permissions.
The only permitted values are an empty array or an array that contains a single JSON object that grants ALL to IAM_ALLOWED_PRINCIPALS.
For more information, see Changing the Default Security Settings for Your Data Lake.
public void setCreateDatabaseDefaultPermissions(Collection<PrincipalPermissions> createDatabaseDefaultPermissions)
Specifies whether access control on newly created database is managed by Lake Formation permissions or exclusively by IAM permissions. You can override this default setting when you create a database.
A null value indicates access control by Lake Formation permissions. A value that assigns ALL to IAM_ALLOWED_PRINCIPALS indicates access control by IAM permissions. This is referred to as the setting "Use only IAM access control," and is for backward compatibility with the Glue permission model implemented by IAM permissions.
The only permitted values are an empty array or an array that contains a single JSON object that grants ALL to IAM_ALLOWED_PRINCIPALS.
For more information, see Changing the Default Security Settings for Your Data Lake.
createDatabaseDefaultPermissions - Specifies whether access control on newly created database is managed by Lake Formation permissions or
exclusively by IAM permissions. You can override this default setting when you create a database.
A null value indicates access control by Lake Formation permissions. A value that assigns ALL to IAM_ALLOWED_PRINCIPALS indicates access control by IAM permissions. This is referred to as the setting "Use only IAM access control," and is for backward compatibility with the Glue permission model implemented by IAM permissions.
The only permitted values are an empty array or an array that contains a single JSON object that grants ALL to IAM_ALLOWED_PRINCIPALS.
For more information, see Changing the Default Security Settings for Your Data Lake.
public DataLakeSettings withCreateDatabaseDefaultPermissions(PrincipalPermissions... createDatabaseDefaultPermissions)
Specifies whether access control on newly created database is managed by Lake Formation permissions or exclusively by IAM permissions. You can override this default setting when you create a database.
A null value indicates access control by Lake Formation permissions. A value that assigns ALL to IAM_ALLOWED_PRINCIPALS indicates access control by IAM permissions. This is referred to as the setting "Use only IAM access control," and is for backward compatibility with the Glue permission model implemented by IAM permissions.
The only permitted values are an empty array or an array that contains a single JSON object that grants ALL to IAM_ALLOWED_PRINCIPALS.
For more information, see Changing the Default Security Settings for Your Data Lake.
NOTE: This method appends the values to the existing list (if any). Use
setCreateDatabaseDefaultPermissions(java.util.Collection) or
withCreateDatabaseDefaultPermissions(java.util.Collection) if you want to override the existing values.
createDatabaseDefaultPermissions - Specifies whether access control on newly created database is managed by Lake Formation permissions or
exclusively by IAM permissions. You can override this default setting when you create a database.
A null value indicates access control by Lake Formation permissions. A value that assigns ALL to IAM_ALLOWED_PRINCIPALS indicates access control by IAM permissions. This is referred to as the setting "Use only IAM access control," and is for backward compatibility with the Glue permission model implemented by IAM permissions.
The only permitted values are an empty array or an array that contains a single JSON object that grants ALL to IAM_ALLOWED_PRINCIPALS.
For more information, see Changing the Default Security Settings for Your Data Lake.
public DataLakeSettings withCreateDatabaseDefaultPermissions(Collection<PrincipalPermissions> createDatabaseDefaultPermissions)
Specifies whether access control on newly created database is managed by Lake Formation permissions or exclusively by IAM permissions. You can override this default setting when you create a database.
A null value indicates access control by Lake Formation permissions. A value that assigns ALL to IAM_ALLOWED_PRINCIPALS indicates access control by IAM permissions. This is referred to as the setting "Use only IAM access control," and is for backward compatibility with the Glue permission model implemented by IAM permissions.
The only permitted values are an empty array or an array that contains a single JSON object that grants ALL to IAM_ALLOWED_PRINCIPALS.
For more information, see Changing the Default Security Settings for Your Data Lake.
createDatabaseDefaultPermissions - Specifies whether access control on newly created database is managed by Lake Formation permissions or
exclusively by IAM permissions. You can override this default setting when you create a database.
A null value indicates access control by Lake Formation permissions. A value that assigns ALL to IAM_ALLOWED_PRINCIPALS indicates access control by IAM permissions. This is referred to as the setting "Use only IAM access control," and is for backward compatibility with the Glue permission model implemented by IAM permissions.
The only permitted values are an empty array or an array that contains a single JSON object that grants ALL to IAM_ALLOWED_PRINCIPALS.
For more information, see Changing the Default Security Settings for Your Data Lake.
public List<PrincipalPermissions> getCreateTableDefaultPermissions()
Specifies whether access control on newly created table is managed by Lake Formation permissions or exclusively by IAM permissions.
A null value indicates access control by Lake Formation permissions. A value that assigns ALL to IAM_ALLOWED_PRINCIPALS indicates access control by IAM permissions. This is referred to as the setting "Use only IAM access control," and is for backward compatibility with the Glue permission model implemented by IAM permissions.
The only permitted values are an empty array or an array that contains a single JSON object that grants ALL to IAM_ALLOWED_PRINCIPALS.
For more information, see Changing the Default Security Settings for Your Data Lake.
A null value indicates access control by Lake Formation permissions. A value that assigns ALL to IAM_ALLOWED_PRINCIPALS indicates access control by IAM permissions. This is referred to as the setting "Use only IAM access control," and is for backward compatibility with the Glue permission model implemented by IAM permissions.
The only permitted values are an empty array or an array that contains a single JSON object that grants ALL to IAM_ALLOWED_PRINCIPALS.
For more information, see Changing the Default Security Settings for Your Data Lake.
public void setCreateTableDefaultPermissions(Collection<PrincipalPermissions> createTableDefaultPermissions)
Specifies whether access control on newly created table is managed by Lake Formation permissions or exclusively by IAM permissions.
A null value indicates access control by Lake Formation permissions. A value that assigns ALL to IAM_ALLOWED_PRINCIPALS indicates access control by IAM permissions. This is referred to as the setting "Use only IAM access control," and is for backward compatibility with the Glue permission model implemented by IAM permissions.
The only permitted values are an empty array or an array that contains a single JSON object that grants ALL to IAM_ALLOWED_PRINCIPALS.
For more information, see Changing the Default Security Settings for Your Data Lake.
createTableDefaultPermissions - Specifies whether access control on newly created table is managed by Lake Formation permissions or
exclusively by IAM permissions.
A null value indicates access control by Lake Formation permissions. A value that assigns ALL to IAM_ALLOWED_PRINCIPALS indicates access control by IAM permissions. This is referred to as the setting "Use only IAM access control," and is for backward compatibility with the Glue permission model implemented by IAM permissions.
The only permitted values are an empty array or an array that contains a single JSON object that grants ALL to IAM_ALLOWED_PRINCIPALS.
For more information, see Changing the Default Security Settings for Your Data Lake.
public DataLakeSettings withCreateTableDefaultPermissions(PrincipalPermissions... createTableDefaultPermissions)
Specifies whether access control on newly created table is managed by Lake Formation permissions or exclusively by IAM permissions.
A null value indicates access control by Lake Formation permissions. A value that assigns ALL to IAM_ALLOWED_PRINCIPALS indicates access control by IAM permissions. This is referred to as the setting "Use only IAM access control," and is for backward compatibility with the Glue permission model implemented by IAM permissions.
The only permitted values are an empty array or an array that contains a single JSON object that grants ALL to IAM_ALLOWED_PRINCIPALS.
For more information, see Changing the Default Security Settings for Your Data Lake.
NOTE: This method appends the values to the existing list (if any). Use
setCreateTableDefaultPermissions(java.util.Collection) or
withCreateTableDefaultPermissions(java.util.Collection) if you want to override the existing values.
createTableDefaultPermissions - Specifies whether access control on newly created table is managed by Lake Formation permissions or
exclusively by IAM permissions.
A null value indicates access control by Lake Formation permissions. A value that assigns ALL to IAM_ALLOWED_PRINCIPALS indicates access control by IAM permissions. This is referred to as the setting "Use only IAM access control," and is for backward compatibility with the Glue permission model implemented by IAM permissions.
The only permitted values are an empty array or an array that contains a single JSON object that grants ALL to IAM_ALLOWED_PRINCIPALS.
For more information, see Changing the Default Security Settings for Your Data Lake.
public DataLakeSettings withCreateTableDefaultPermissions(Collection<PrincipalPermissions> createTableDefaultPermissions)
Specifies whether access control on newly created table is managed by Lake Formation permissions or exclusively by IAM permissions.
A null value indicates access control by Lake Formation permissions. A value that assigns ALL to IAM_ALLOWED_PRINCIPALS indicates access control by IAM permissions. This is referred to as the setting "Use only IAM access control," and is for backward compatibility with the Glue permission model implemented by IAM permissions.
The only permitted values are an empty array or an array that contains a single JSON object that grants ALL to IAM_ALLOWED_PRINCIPALS.
For more information, see Changing the Default Security Settings for Your Data Lake.
createTableDefaultPermissions - Specifies whether access control on newly created table is managed by Lake Formation permissions or
exclusively by IAM permissions.
A null value indicates access control by Lake Formation permissions. A value that assigns ALL to IAM_ALLOWED_PRINCIPALS indicates access control by IAM permissions. This is referred to as the setting "Use only IAM access control," and is for backward compatibility with the Glue permission model implemented by IAM permissions.
The only permitted values are an empty array or an array that contains a single JSON object that grants ALL to IAM_ALLOWED_PRINCIPALS.
For more information, see Changing the Default Security Settings for Your Data Lake.
public List<String> getTrustedResourceOwners()
A list of the resource-owning account IDs that the caller's account can use to share their user access details (user ARNs). The user ARNs can be logged in the resource owner's CloudTrail log.
You may want to specify this property when you are in a high-trust boundary, such as the same team or company.
You may want to specify this property when you are in a high-trust boundary, such as the same team or company.
public void setTrustedResourceOwners(Collection<String> trustedResourceOwners)
A list of the resource-owning account IDs that the caller's account can use to share their user access details (user ARNs). The user ARNs can be logged in the resource owner's CloudTrail log.
You may want to specify this property when you are in a high-trust boundary, such as the same team or company.
trustedResourceOwners - A list of the resource-owning account IDs that the caller's account can use to share their user access
details (user ARNs). The user ARNs can be logged in the resource owner's CloudTrail log.
You may want to specify this property when you are in a high-trust boundary, such as the same team or company.
public DataLakeSettings withTrustedResourceOwners(String... trustedResourceOwners)
A list of the resource-owning account IDs that the caller's account can use to share their user access details (user ARNs). The user ARNs can be logged in the resource owner's CloudTrail log.
You may want to specify this property when you are in a high-trust boundary, such as the same team or company.
NOTE: This method appends the values to the existing list (if any). Use
setTrustedResourceOwners(java.util.Collection) or
withTrustedResourceOwners(java.util.Collection) if you want to override the existing values.
trustedResourceOwners - A list of the resource-owning account IDs that the caller's account can use to share their user access
details (user ARNs). The user ARNs can be logged in the resource owner's CloudTrail log.
You may want to specify this property when you are in a high-trust boundary, such as the same team or company.
public DataLakeSettings withTrustedResourceOwners(Collection<String> trustedResourceOwners)
A list of the resource-owning account IDs that the caller's account can use to share their user access details (user ARNs). The user ARNs can be logged in the resource owner's CloudTrail log.
You may want to specify this property when you are in a high-trust boundary, such as the same team or company.
trustedResourceOwners - A list of the resource-owning account IDs that the caller's account can use to share their user access
details (user ARNs). The user ARNs can be logged in the resource owner's CloudTrail log.
You may want to specify this property when you are in a high-trust boundary, such as the same team or company.
public String toString()
toString in class ObjectObject.toString()public DataLakeSettings clone()
public void marshall(ProtocolMarshaller protocolMarshaller)
marshall in interface StructuredPojoCopyright © 2021. All rights reserved.