capabilities.work

Migrate Principal Permissions

A 4-step recipe with Amazon Lake Formation. We can help you get access.

Recipe · 4 steps

Migrate Principal Permissions

with Amazon Lake Formation

Transfer resource permissions from a source principal to a destination principal.

  1. List the source principal's current permissions on the resource to confirm there is something to migrate.
  2. Grant the destination principal the same permissions on the resource.
  3. Revoke the permissions from the source principal to complete the transfer.
  4. List the destination principal's permissions to confirm the migration landed.
What you'll need to have ready
  • sourcePrincipal: The DataLakePrincipal currently holding the permissions.
  • destinationPrincipal: The DataLakePrincipal that should receive the permissions.
  • resource: The Data Catalog Resource the permissions apply to.
  • permissions: The list of permissions to migrate (e.g. ["SELECT","DESCRIBE"]).
  • permissionsWithGrantOption: The subset of grant-option permissions to migrate.
For your developer

Arazzo workflow amazon-lake-formation:migrate-principal-permissions, 4 operations: ListPermissions → GrantPermissions → RevokePermissions → ListPermissions. Specs on APIs.io.

More recipes with Amazon Lake Formation

Audit Resource PermissionsDeregister Resource LifecycleRegister Resource and Grant PermissionsRotate Resource Data Access RoleRevoke Permissions and Verify