Amazon Lake Formation

AWS Lake Formation is a service that makes it easy to set up a secure data lake in days, providing centralized governance and security for data stored in Amazon S3 and other AWS data stores with fine-grained access control.

1 APIs 5 Features

Access ControlAnalyticsData GovernanceData LakeS3

APIs

Amazon Lake Formation API

The AWS Lake Formation API provides programmatic access to create and manage data lakes, configure data permissions and access controls, register data sources, and manage data c...

Collections

Amazon Lake Formation API

POSTMAN

Amazon Lake Formation API

OPEN

Arazzo Workflows

Amazon Lake Formation Audit Resource Permissions

Enumerate registered data lake locations and list the permissions on a selected resource.

ARAZZO

Amazon Lake Formation Deregister Resource Lifecycle

Confirm a registered data lake location exists, deregister it, and verify removal.

ARAZZO

Amazon Lake Formation Migrate Principal Permissions

Grant a destination principal the same permissions and then revoke them from the source principal.

ARAZZO

Amazon Lake Formation Register Resource and Grant Permissions

Register an Amazon S3 location as a data lake resource and grant a principal access to it.

ARAZZO

Amazon Lake Formation Rotate Resource Data Access Role

Swap the IAM data access role on a registered data lake location by deregistering and re-registering it.

ARAZZO

Amazon Lake Formation Revoke Permissions and Verify

Revoke a principal's permissions on a resource and verify they were removed.

ARAZZO

Pricing Plans

Amazon Lake Formation Plans Pricing

3 plans

PLANS

Rate Limits

Amazon Lake Formation Rate Limits

5 limits

RATE LIMITS

FinOps

Amazon Lake Formation Finops

FINOPS

Features

Fine-Grained Access Control

Grant table, column, row, and cell-level permissions to data in your data lake.

Centralized Governance

Centrally define and manage security, governance, and auditing policies across the data lake.

Data Catalog Integration

Integrates with AWS Glue Data Catalog to discover, catalog, and share metadata.

Cross-Account Data Sharing

Securely share data across AWS accounts without copying it.

Governed Tables

ACID transactions and automatic compaction for governed tables stored in S3.

Use Cases

Data Lake Security

Implement fine-grained access control for data stored in S3 with row and column-level security.

Self-Service Analytics

Enable business users to discover and access approved data without manual provisioning.

Cross-Account Data Sharing

Share data lake resources across AWS accounts and organizations.

Semantic Vocabularies

Amazon Lake Formation Context

2 classes · 7 properties

JSON-LD

API Governance Rules

Amazon Lake Formation API Rules

16 rules · 9 errors 7 warnings

SPECTRAL

JSON Structure

Amazon Lake Formation Permission Structure

3 properties

JSON STRUCTURE

Amazon Lake Formation Resource Structure

3 properties

JSON STRUCTURE

Example Payloads

Amazon Lake Formation Permission Example

3 fields

EXAMPLE

Amazon Lake Formation Resource Example

3 fields

EXAMPLE

Resources

PostmanWorkspace

PostmanWorkspace

TermsOfService

Documentation

GettingStarted

PrivacyPolicy

GitHubOrganization

GitHubOrganization

SpectralRules

Sources

opencollection: 1.0.0
info:
  name: Amazon Lake Formation API
  version: '2024-01-01'
request:
  auth:
    type: apikey
    key: Authorization
    value: '{{Authorization}}'
    placement: header
items:
- info:
    name: Resources
    type: folder
  items:
  - info:
      name: Amazon Lake Formation List Resources
      type: http
    http:
      method: GET
      url: https://lakeformation.us-east-1.amazonaws.com/resources
    docs: Lists the resources registered as managed by Lake Formation.
  - info:
      name: Amazon Lake Formation Register Resource
      type: http
    http:
      method: POST
      url: https://lakeformation.us-east-1.amazonaws.com/resources
    docs: Registers an Amazon S3 path as a data lake location managed by Lake Formation.
  - info:
      name: Amazon Lake Formation Describe Resource
      type: http
    http:
      method: GET
      url: https://lakeformation.us-east-1.amazonaws.com/resources/:resourceArn
      params:
      - name: resourceArn
        value: ''
        type: path
        description: The resource ARN.
    docs: Retrieves the current data access role for the given resource registered in Lake Formation.
  - info:
      name: Amazon Lake Formation Deregister Resource
      type: http
    http:
      method: DELETE
      url: https://lakeformation.us-east-1.amazonaws.com/resources/:resourceArn
      params:
      - name: resourceArn
        value: ''
        type: path
        description: The resource ARN.
    docs: Deregisters the resource as managed by the Data Catalog.
  - info:
      name: Amazon Lake Formation List Permissions
      type: http
    http:
      method: GET
      url: https://lakeformation.us-east-1.amazonaws.com/permissions
    docs: Returns a list of the principal permissions on the resource.
  - info:
      name: Amazon Lake Formation Grant Permissions
      type: http
    http:
      method: POST
      url: https://lakeformation.us-east-1.amazonaws.com/permissions
    docs: Grants permissions to the principal to access metadata in the Data Catalog and data organized in underlying data
      storage such as Amazon S3.
  - info:
      name: Amazon Lake Formation Revoke Permissions
      type: http
    http:
      method: DELETE
      url: https://lakeformation.us-east-1.amazonaws.com/permissions
    docs: Revokes permissions to the principal to access metadata in the Data Catalog.
bundled: true