Sign in

v1

latestOpenAPI 3.0.0Apache 2.0 License2026-07-1447264222.7 KB

Allows a caller in a secure environment to assume a role with permission to access Amazon S3. In order to vend such credentials, Lake Formation assumes the role associated with a registered location, for example an Amazon S3 bucket, with a scope down policy which restricts the access to a single prefix.

post/GetTemporaryGlueTableCredentials

Request body

TableArnstring required

The ARN identifying a table in the Data Catalog for the temporary credentials request.

PermissionsPermission[]

Filters the request based on the user having been granted a list of specified permissions on the requested resource(s).

DurationSecondsinteger

The time period, between 900 and 21,600 seconds, for the timeout of the temporary credentials.

SupportedPermissionTypesPermissionType[] required

A list of supported permission types for the table. Valid values are <code>COLUMN_PERMISSION</code> and <code>CELL_FILTER_PERMISSION</code>.

Response

Success

AccessKeyIdstring

The access key ID for the temporary credentials.

SecretAccessKeystring

The secret key for the temporary credentials.

SessionTokenstring

The session token for the temporary credentials.

Expirationstring date-time

The date and time when the temporary credentials expire.