Skip to content

(aws-glue): expose grant API for glue Table #17935

Closed
@kaizencc

Description

Description

Currently the table.grant() API is private:

private grant(grantee: iam.IGrantable, actions: string[]) {
return iam.Grant.addToPrincipal({
grantee,
resourceArns: [this.tableArn],
actions,
});
}

AFAIK that is not the typical CDK behavior. We usually expose grant APIs to unblock users who want to grant custom permissions.

Use Case

I want to grant a custom permission to a glue table. Specifically I want to do:

table.grant(customResource, ['glue:UpdateTable']);

Proposed Solution

Expose the API as public.

Other information

No response

Acknowledge

  • I may be able to implement this feature request
  • This feature might incur a breaking change

Metadata

Assignees

Labels

@aws-cdk/aws-glueRelated to AWS Glueeffort/smallSmall work item – less than a day of effortfeature-requestA feature should be added or improved.p1

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions