aws-cloudformation / aws-cloudformation/cloudformation-coverage-roadmap

[AWS::LakeFormation::DataLakeSettings] - [Coverage] - Missing Database Creator Setting

Open
#2,249 0 comments 5 reactions 0 assignees View on GitHub
Coverage
Dominant language
No language data
Stars
1.1k
Forks
62
PR merge metrics
No merged PRs in 30d

Description

### Name of the resource

AWS::LakeFormation::DataLakeSettings

### Resource name

_No response_

### Description

This functionality appears to not be supported by SDK either https://docs.aws.amazon.com/AWSJavaScriptSDK/latest/AWS/LakeFormation.html

## Feature Description

A new API function may be required.
The functionality this is referring to in console is in LakeFormation > Administrative roles and tasks. On this page there are 3 settings, Data lake administrators, Catalog creators, Database creators.

## Current State

In the current state, Data lake administrators is already supported in `AWS::LakeFormation::DataLakeSettings`, this is via the "Admins" Property. However, it appears that Catalog creators and Database creators are not supported at this time.

Database creators defaults to only IAM Allowed Principals, and Catalog creators has no defaults. This is an issue in general for teams using the "REPLACE" method of handling LF permissions with CFN.

## Desired State

As mentioned SDK support may be needed first, so this lift could be significant.
The end goal is for CDK to have this ability enabled in it's L1 constructs, see issue https://github.com/aws/aws-cdk/issues/27671.

To support this, a CFN property needs to be added to allow us to specify specific roles that are allowed to be Database Creators.
Database creators is the main request, but since Catalog creators is also missing, if possible we could look into this at the same time, but this is not critical at this time.

### Other Details

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.