capabilities.work

Rotate Resource Data Access Role

A 4-step recipe with Amazon Lake Formation. We can help you get access.

Recipe · 4 steps

Rotate Resource Data Access Role

with Amazon Lake Formation

Rotate the IAM data access role on a registered data lake location.

  1. Capture the current data access role for the registered location before rotation.
  2. Deregister the location so it can be re-registered with the new role.
  3. Re-register the same location with the new IAM data access role.
  4. Describe the location again to confirm the new data access role is in effect.
What you'll need to have ready
  • resourceArn: The ARN of the registered data lake location whose role is being rotated.
  • newRoleArn: The new IAM role ARN Lake Formation should assume for the location.
  • useServiceLinkedRole: Whether to re-register using the Lake Formation service-linked role.
For your developer

Arazzo workflow amazon-lake-formation:reregister-resource-role, 4 operations: DescribeResource → DeregisterResource → RegisterResource → DescribeResource. Specs on APIs.io.

More recipes with Amazon Lake Formation

Audit Resource PermissionsDeregister Resource LifecycleMigrate Principal PermissionsRegister Resource and Grant PermissionsRevoke Permissions and Verify