lakeformation.yml

Actions:
  - Name: lakeformation:AddLFTagsToResource
  - Name: lakeformation:BatchGrantPermissions
  - Name: lakeformation:BatchRevokePermissions
  - Name: lakeformation:CancelTransaction
  - Name: lakeformation:CommitTransaction
  - Name: lakeformation:CreateDataCellsFilter
  - Name: lakeformation:CreateLFTag
  - Name: lakeformation:CreateLakeFormationIdentityCenterConfiguration
  - Name: lakeformation:CreateLakeFormationOptIn
  - Name: lakeformation:DeleteDataCellsFilter
  - Name: lakeformation:DeleteLFTag
  - Name: lakeformation:DeleteLakeFormationIdentityCenterConfiguration
  - Name: lakeformation:DeleteLakeFormationOptIn
  - Name: lakeformation:DeleteObjectsOnCancel
  - Name: lakeformation:DeregisterResource
  - Name: lakeformation:DescribeLakeFormationIdentityCenterConfiguration
  - Name: lakeformation:DescribeResource
  - Name: lakeformation:DescribeTransaction
  - Name: lakeformation:ExtendTransaction
  - Name: lakeformation:GetDataCellsFilter
  - Name: lakeformation:GetDataLakePrincipal
  - Name: lakeformation:GetDataLakeSettings
  - Name: lakeformation:GetEffectivePermissionsForPath
  - Name: lakeformation:GetLFTag
  - Name: lakeformation:GetQueryState
  - Name: lakeformation:GetQueryStatistics
  - Name: lakeformation:GetResourceLFTags
  - Name: lakeformation:GetTableObjects
  - Name: lakeformation:GetWorkUnitResults
  - Name: lakeformation:GetWorkUnits
  - Name: lakeformation:GrantPermissions
  - Name: lakeformation:ListDataCellsFilter
  - Name: lakeformation:ListLFTags
  - Name: lakeformation:ListLakeFormationOptIns
  - Name: lakeformation:ListPermissions
  - Name: lakeformation:ListResources
  - Name: lakeformation:ListTableStorageOptimizers
  - Name: lakeformation:ListTransactions
  - Name: lakeformation:PutDataLakeSettings
  - Name: lakeformation:RegisterResource
  - Name: lakeformation:RemoveLFTagsFromResource
  - Name: lakeformation:RevokePermissions
  - Name: lakeformation:SearchDatabasesByLFTags
  - Name: lakeformation:SearchTablesByLFTags
  - Name: lakeformation:StartQueryPlanning
  - Name: lakeformation:StartTransaction
  - Name: lakeformation:UpdateDataCellsFilter
  - Name: lakeformation:UpdateLFTag
  - Name: lakeformation:UpdateLakeFormationIdentityCenterConfiguration
  - Name: lakeformation:UpdateResource
  - Name: lakeformation:UpdateTableObjects
  - Name: lakeformation:UpdateTableStorageOptimizer

  # actions with no corresponding API
  - Name: lakeformation:CreateLFTagExpression
  - Name: lakeformation:DeleteLFTagExpression
  - Name: lakeformation:GetDataAccess
  - Name: lakeformation:GetLFTagExpression
  - Name: lakeformation:ListLFTagExpressions
  - Name: lakeformation:UpdateLFTagExpression

  # APIs without an IAM action
  - Name: lakeformation:AssumeDecoratedRoleWithSAML
  - Name: lakeformation:GetTemporaryGluePartitionCredentials
  - Name: lakeformation:GetTemporaryGlueTableCredentials