---
title: "POST /GetTemporaryGlueTableCredentials"
method: POST
path: "/GetTemporaryGlueTableCredentials"
---

# POST /GetTemporaryGlueTableCredentials

`POST /GetTemporaryGlueTableCredentials`

Allows a caller in a secure environment to assume a role with permission to access Amazon S3. In order to vend such credentials, Lake Formation assumes the role associated with a registered location, for example an Amazon S3 bucket, with a scope down policy which restricts the access to a single prefix.

## Request body

- object
  - `TableArn` string, required — The ARN identifying a table in the Data Catalog for the temporary credentials request.
  - `Permissions` Permission[] — Filters the request based on the user having been granted a list of specified permissions on the requested resource(s).
  - `DurationSeconds` integer — The time period, between 900 and 21,600 seconds, for the timeout of the temporary credentials.
  - `AuditContext` object — A structure used to include auditing information on the privileged API.
    - `AdditionalAuditContext` string — The filter engine can populate the 'AdditionalAuditContext' information with the request ID for you to track. This information will be displayed in CloudTrail log in your account.
  - `SupportedPermissionTypes` PermissionType[], required — A list of supported permission types for the table. Valid values are <code>COLUMN_PERMISSION</code> and <code>CELL_FILTER_PERMISSION</code>.

## Response `200`

Success

- GetTemporaryGlueTableCredentialsResponse
  - `AccessKeyId` string — The access key ID for the temporary credentials.
  - `SecretAccessKey` string — The secret key for the temporary credentials.
  - `SessionToken` string — The session token for the temporary credentials.
  - `Expiration` string, date-time — The date and time when the temporary credentials expire.

## Other responses

- `480` — InvalidInputException
- `481` — InternalServiceException
- `482` — OperationTimeoutException
- `483` — EntityNotFoundException
- `484` — AccessDeniedException
- `485` — PermissionTypeMismatchException

---

[API](https://skmtc.net/aws/apis/lakeformation.md) · [All operations](https://skmtc.net/aws/apis/lakeformation/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/lakeformation/versions/a7cd69eb107d/schema)