Optional ReadonlycreateTarget account numbers for cross-account resource link creation.
Optional ReadonlycreateCustom name for cross-account resource links. Defaults to database name.
Optional ReadonlycreateAuto-create read grants for data engineer roles on this database.
Optional ReadonlycreateAuto-create read/write grants for project execution roles on this database and S3 locations.
Optional ReadonlycreateAuto-create super grants for data admin roles on this database.
Optional ReadonlydatabaseLF-Tag values to associate with this database for tag-based access control.
Optional ReadonlygrantsNamed Lake Formation grant configurations for this database.
Optional ReadonlytagTag-based grant configurations for LF-Tag-based access control.
Lake Formation database permissions configuration for automatic grant management on project databases.
Use cases: Automated data admin permissions; DataOps team access management; Lake Formation grant automation; Database permission simplification; Project-level access control
AWS: AWS Lake Formation database permissions with automatic super grants for data admin roles on DataOps project databases
Validation: createSuperGrantsForDataAdminRoles must be boolean; data admin roles must exist in the account; database must be registered with Lake Formation