GetTemporaryGlueTableCredentials

Source: src/AWS/LakeFormation/GetTemporaryGlueTableCredentials.ts

Runtime binding for lakeformation:GetDataAccess (table scope).

Vends temporary S3 credentials scoped down to the storage of one Glue table, enforcing the caller’s Lake Formation grants — the credential vending API used by query engines. The returned SecretAccessKey and SessionToken are Redacted. Provide the implementation with Effect.provide(AWS.LakeFormation.GetTemporaryGlueTableCredentialsHttp).

Vending Data Access Credentials

// init — account-level binding takes no resource
const getTableCredentials =
  yield* AWS.LakeFormation.GetTemporaryGlueTableCredentials();

// runtime
const credentials = yield* getTableCredentials({
  TableArn: table.tableArn,
  Permissions: ["SELECT"],
  SupportedPermissionTypes: ["COLUMN_PERMISSION"],
});
const secret = Redacted.value(credentials.SecretAccessKey!);