# yaml-language-server: $schema=../../../schemas/@aws-mdaa/dataops-project.json
# Arns for IAM roles which will be provided to the projects's resources (IE bucket)
dataAdminRoles:
  # This is an arn which will be resolved first to a role ID for inclusion in the bucket policy.
  # Note that this resolution will require iam:GetRole against this role arn for the role executing CDK.
  - id: ssm:/{{org}}/governance/generated-role/data-admin/id

# List of roles which will be used to execute dataops processes using project resources
projectExecutionRoles:
  - id: ssm:/{{org}}/governance/generated-role/glue-etl/id

s3OutputKmsKeyArn: ssm:/{{org}}/data/datalake/kms/arn
glueCatalogKmsKeyArn: ssm:/{{org}}/governance/glue-catalog/kms/arn
# List of Databases to create within the project.
databases:
  # This database will be used to illustrate access grants
  # using LakeFormation.
  sample-database:
    description: Test Database
    # The data lake S3 bucket and prefix location where the database data is stored.
    # Project execution roles will be granted access to create Glue tables
    # which point to this location.
    locationBucketName: ssm:/{{org}}/data/datalake/bucket/transformed/name
    locationPrefix: data/sample_data