capabilities.work

Revoke Permissions and Verify

A 3-step recipe with Amazon Lake Formation. We can help you get access.

Recipe · 3 steps

Revoke Permissions and Verify

with Amazon Lake Formation

Revoke a principal's permissions on a resource and confirm removal.

  1. List the principal's current permissions on the resource before any revocation is attempted.
  2. Revoke the requested permissions from the principal on the target resource.
  3. Re-list the principal's permissions on the resource to confirm the requested permissions were removed.
What you'll need to have ready
  • principal: The DataLakePrincipal whose permissions are being revoked.
  • resource: The Data Catalog Resource the permissions apply to.
  • permissions: The list of permissions to revoke (e.g. ["SELECT","DESCRIBE"]).
  • permissionsWithGrantOption: The subset of grant-option permissions to revoke.
For your developer

Arazzo workflow amazon-lake-formation:revoke-and-verify, 3 operations: ListPermissions → RevokePermissions → ListPermissions. Specs on APIs.io.

More recipes with Amazon Lake Formation

Audit Resource PermissionsDeregister Resource LifecycleMigrate Principal PermissionsRegister Resource and Grant PermissionsRotate Resource Data Access Role