Optional ReadonlyadditionalBuilder invoked to produce the additional statements (e.g. table-level grant Allow statements) to append after the mandatory deny-non-TLS statement in the table policy. Its IMdaaTablePolicyStatementsBuilder.buildStatements method receives the table ARN so callers can scope statements without re-deriving it. Only invoked when attachTablePolicy is not false.
Optional ReadonlyattachWhether to attach the single MdaaTablePolicy that this table owns. Defaults to true, which bakes in the mandatory deny-non-TLS (in-transit) control as compliance-by-default, so a table provisioned directly through this construct is TLS-enforced at its own resource level.
Setting this to false is a documented escape hatch that suppresses the table resource policy entirely — leaving the table with NO in-transit (TLS) enforcement of its own (it would then rely solely on the parent bucket policy). Only opt out when the caller intentionally manages the single allowed table policy elsewhere; otherwise leave this at its default to remain compliant.
ReadonlycolumnsColumn definitions (at least one, max 200).
Optional ReadonlycompactionOptional Iceberg compaction settings. Rendered into the table's Compaction property. Compaction is a table property (not a bucket property).
Optional ReadonlycreateFlag controlling CloudFormation output and stack export creation for construct resources
Optional ReadonlycreateFlag controlling SSM parameter creation for construct resource references enabling
ReadonlynamespaceName of the parent Namespace.
ReadonlynamingMDAA naming implementation for consistent resource naming across all MDAA constructs
Optional ReadonlypartitionsPartition specifications.
Optional ReadonlysnapshotOptional Iceberg snapshot management settings. Rendered into the table's SnapshotManagement property. Snapshot management is a table property (not a bucket property).
Optional ReadonlysortSort order specifications.
ReadonlytableARN of the parent Table Bucket.
ReadonlytableTable name.
Props for the MdaaTable construct.