DataLakeSettings

Source: src/AWS/LakeFormation/DataLakeSettings.ts

The Lake Formation data lake settings for the account — an account/region singleton controlling who the data lake administrators are, the default permissions for new databases/tables, and external data filtering.

The resource is capture-and-restore: the pre-existing settings are snapshotted the first time it reconciles, admin lists are managed additively (existing admins are never removed), and destroy puts back what was there before for everything this resource managed.

Managing Administrators

import * as AWS from "alchemy/AWS";

const settings = yield* AWS.LakeFormation.DataLakeSettings("Settings", {
  dataLakeAdmins: [adminRole.roleArn],
});

Default Permissions

const settings = yield* AWS.LakeFormation.DataLakeSettings("Settings", {
  dataLakeAdmins: [adminRole.roleArn],
  createDatabaseDefaultPermissions: [],
  createTableDefaultPermissions: [],
});