Skip to content

/AWS1/CL_LKFGETTMPDATALOCCRE01

GetTemporaryDataLocationCredentialsResponse

CONSTRUCTOR

IMPORTING

Optional arguments:

io_credentials TYPE REF TO /AWS1/CL_LKFTEMPORARYCREDS /AWS1/CL_LKFTEMPORARYCREDS

A temporary set of credentials for an Lake Formation user. These credentials are scoped down to only access the raw data sources that the user has access to.

The temporary security credentials consist of an access key and a session token. The access key consists of an access key ID and a secret key. When the credentials are created, they are associated with an IAM access control policy that limits what the user can do when using the credentials.

it_accessibledatalocations TYPE /AWS1/CL_LKFPATHSTRINGLIST_W=>TT_PATHSTRINGLIST TT_PATHSTRINGLIST

Refers to the Amazon S3 locations that can be accessed through the GetTemporaryCredentialsForLocation API operation.

iv_credentialsscope TYPE /AWS1/LKFCREDENTIALSSCOPE /AWS1/LKFCREDENTIALSSCOPE

The credential scope is determined by the caller's Lake Formation permission on the associated table. Credential scope can be either:

  • READ - Provides read-only access to the data location.

  • READ_WRITE - Provides both read and write access to the data location.

Queryable Attributes

Credentials

A temporary set of credentials for an Lake Formation user. These credentials are scoped down to only access the raw data sources that the user has access to.

The temporary security credentials consist of an access key and a session token. The access key consists of an access key ID and a secret key. When the credentials are created, they are associated with an IAM access control policy that limits what the user can do when using the credentials.

Accessible with the following methods

Method Description
GET_CREDENTIALS() Getter for CREDENTIALS

AccessibleDataLocations

Refers to the Amazon S3 locations that can be accessed through the GetTemporaryCredentialsForLocation API operation.

Accessible with the following methods

Method Description
GET_ACCESSIBLEDATALOCATIONS() Getter for ACCESSIBLEDATALOCATIONS, with configurable defaul
ASK_ACCESSIBLEDATALOCATIONS() Getter for ACCESSIBLEDATALOCATIONS w/ exceptions if field ha
HAS_ACCESSIBLEDATALOCATIONS() Determine if ACCESSIBLEDATALOCATIONS has a value

CredentialsScope

The credential scope is determined by the caller's Lake Formation permission on the associated table. Credential scope can be either:

  • READ - Provides read-only access to the data location.

  • READ_WRITE - Provides both read and write access to the data location.

Accessible with the following methods

Method Description
GET_CREDENTIALSSCOPE() Getter for CREDENTIALSSCOPE, with configurable default
ASK_CREDENTIALSSCOPE() Getter for CREDENTIALSSCOPE w/ exceptions if field has no va
HAS_CREDENTIALSSCOPE() Determine if CREDENTIALSSCOPE has a value