capabilities.work

Audit Resource Permissions

A 3-step recipe with Amazon Lake Formation. We can help you get access.

Recipe · 3 steps

Audit Resource Permissions

with Amazon Lake Formation

Inventory registered locations and audit permissions on a selected resource.

  1. List all resources currently registered with Lake Formation to establish the audit scope.
  2. Describe the target registered location to capture its current data access role.
  3. List the principal permissions on the Data Catalog resource for the access review.
What you'll need to have ready
  • resourceArn: The ARN of the registered data lake location to describe.
  • resource: The Data Catalog Resource whose permissions are being audited.
  • principal: Optional principal to scope the permission listing to a single identity.
For your developer

Arazzo workflow amazon-lake-formation:audit-resource-permissions, 3 operations: ListResources → DescribeResource → ListPermissions. Specs on APIs.io.

More recipes with Amazon Lake Formation

Deregister Resource LifecycleMigrate Principal PermissionsRegister Resource and Grant PermissionsRotate Resource Data Access RoleRevoke Permissions and Verify