-
Notifications
You must be signed in to change notification settings - Fork 4.5k
(aws-glue): expose grant API for glue Table #17935
Copy link
Copy link
Closed
Labels
@aws-cdk/aws-glueRelated to AWS GlueRelated to AWS Glueeffort/smallSmall work item – less than a day of effortSmall work item – less than a day of effortfeature-requestA feature should be added or improved.A feature should be added or improved.p1
Description
Description
Currently the table.grant() API is private:
aws-cdk/packages/@aws-cdk/aws-glue/lib/table.ts
Lines 328 to 334 in 42cf186
| private grant(grantee: iam.IGrantable, actions: string[]) { | |
| return iam.Grant.addToPrincipal({ | |
| grantee, | |
| resourceArns: [this.tableArn], | |
| actions, | |
| }); | |
| } |
AFAIK that is not the typical CDK behavior. We usually expose grant APIs to unblock users who want to grant custom permissions.
Use Case
I want to grant a custom permission to a glue table. Specifically I want to do:
table.grant(customResource, ['glue:UpdateTable']);Proposed Solution
Expose the API as public.
Other information
No response
Acknowledge
- I may be able to implement this feature request
- This feature might incur a breaking change
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
@aws-cdk/aws-glueRelated to AWS GlueRelated to AWS Glueeffort/smallSmall work item – less than a day of effortSmall work item – less than a day of effortfeature-requestA feature should be added or improved.A feature should be added or improved.p1