aws / aws/aws-cdk

@aws-cdk/aws-glue-alpha: grantToUnderlyingResources should add to catalog policy

Open
#25,691 8 comments 0 reactions 0 assignees View on GitHub
@aws-cdk/aws-glue effort/medium feature-request needs-cfn p2
Dominant language
TypeScript
Stars
12.9k
Forks
4.6k
Avg merge
2d 3h
Merged PRs (30d)
83

Description

### Describe the bug

As per the documentation, Table.grantToUnderlyingResources(grantee, actions) grants permission to grantee for actions on underlying resources, i.e. table, database and catalog.

However, after synth the generated template doesn't have any permission and after deploying the stack no permission is added.

### Expected Behavior

After synth, I should see the policy in generated template and in Glue console, I should see the policy in Catalog Setting.

### Current Behavior

Generated template doesn't have any policy and after deployment there is no policy in Catalog Setting.

### Reproduction Steps

Create a table, call grantToUnderlyingResources with some principal.

### Possible Solution

_No response_

### Additional Information/Context

_No response_

### CDK CLI Version

2.80.0

### Framework Version

_No response_

### Node.js Version

19.8.1

### OS

MacOs

### Language

Typescript

### Language Version

_No response_

### Other information

_No response_

Contributor guide

Open the contributing guide

Research direction

Reproduce the issue with an AWS CDK Table and grantToUnderlyingResources call using CDK 2.80.0, then inspect the synthesized template and the Glue Catalog Setting after deployment. Done means the requested actions produce a catalog policy in both places.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, typescript
Domain
cloud, infrastructure
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
38/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.