@pulumi/aws/lakeformation/getDataLakeSettings.d.ts

A Pulumi package for creating and managing Amazon Web Services (AWS) cloud resources.

import * as pulumi from "@pulumi/pulumi";
import * as outputs from "../types/output";
/**
 * Get Lake Formation principals designated as data lake administrators and lists of principal permission entries for default create database and default create table permissions.
 *
 * ## Example Usage
 *
 * ```typescript
 * import * as pulumi from "@pulumi/pulumi";
 * import * as aws from "@pulumi/aws";
 *
 * const example = aws.lakeformation.getDataLakeSettings({
 *     catalogId: "14916253649",
 * });
 * ```
 */
export declare function getDataLakeSettings(args?: GetDataLakeSettingsArgs, opts?: pulumi.InvokeOptions): Promise<GetDataLakeSettingsResult>;
/**
 * A collection of arguments for invoking getDataLakeSettings.
 */
export interface GetDataLakeSettingsArgs {
    /**
     * Identifier for the Data Catalog. By default, the account ID.
     */
    catalogId?: string;
    /**
     * Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
     */
    region?: string;
}
/**
 * A collection of values returned by getDataLakeSettings.
 */
export interface GetDataLakeSettingsResult {
    /**
     * List of ARNs of AWS Lake Formation principals (IAM users or roles).
     */
    readonly admins: string[];
    /**
     * Whether to allow Amazon EMR clusters to access data managed by Lake Formation.
     */
    readonly allowExternalDataFiltering: boolean;
    /**
     * Whether to allow a third-party query engine to get data access credentials without session tags when a caller has full data access permissions.
     */
    readonly allowFullTableExternalDataAccess: boolean;
    /**
     * Lake Formation relies on a privileged process secured by Amazon EMR or the third party integrator to tag the user's role while assuming it.
     */
    readonly authorizedSessionTagValueLists: string[];
    readonly catalogId?: string;
    /**
     * Up to three configuration blocks of principal permissions for default create database permissions. Detailed below.
     */
    readonly createDatabaseDefaultPermissions: outputs.lakeformation.GetDataLakeSettingsCreateDatabaseDefaultPermission[];
    /**
     * Up to three configuration blocks of principal permissions for default create table permissions. Detailed below.
     */
    readonly createTableDefaultPermissions: outputs.lakeformation.GetDataLakeSettingsCreateTableDefaultPermission[];
    /**
     * A list of the account IDs of Amazon Web Services accounts with Amazon EMR clusters that are to perform data filtering.
     */
    readonly externalDataFilteringAllowLists: string[];
    /**
     * The provider-assigned unique ID for this managed resource.
     */
    readonly id: string;
    /**
     * Key-value map of additional configuration. `CROSS_ACCOUNT_VERSION` will be set to values `"1"`, `"2"`, `"3"`, or `"4"`. `SET_CONTEXT` will also be returned with a value of `TRUE`. In a fresh account, prior to configuring, `CROSS_ACCOUNT_VERSION` is `"1"`.
     */
    readonly parameters: {
        [key: string]: string;
    };
    /**
     * List of ARNs of AWS Lake Formation principals (IAM users or roles) with only view access to the resources.
     */
    readonly readOnlyAdmins: string[];
    readonly region: string;
    /**
     * List of the resource-owning account IDs that the caller's account can use to share their user access details (user ARNs).
     */
    readonly trustedResourceOwners: string[];
}
/**
 * Get Lake Formation principals designated as data lake administrators and lists of principal permission entries for default create database and default create table permissions.
 *
 * ## Example Usage
 *
 * ```typescript
 * import * as pulumi from "@pulumi/pulumi";
 * import * as aws from "@pulumi/aws";
 *
 * const example = aws.lakeformation.getDataLakeSettings({
 *     catalogId: "14916253649",
 * });
 * ```
 */
export declare function getDataLakeSettingsOutput(args?: GetDataLakeSettingsOutputArgs, opts?: pulumi.InvokeOutputOptions): pulumi.Output<GetDataLakeSettingsResult>;
/**
 * A collection of arguments for invoking getDataLakeSettings.
 */
export interface GetDataLakeSettingsOutputArgs {
    /**
     * Identifier for the Data Catalog. By default, the account ID.
     */
    catalogId?: pulumi.Input<string>;
    /**
     * Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
     */
    region?: pulumi.Input<string>;
}