LakeFormation资源权限支持列表与策略项
LakeFormation权限策略（Spark）
| 类型 | SQL语句 | 元数据IAM鉴权权限 | SQL资源鉴权权限 |
|---|---|---|---|
| DDL语句 | ALTER DATABASE | database:describe database:alter | database:DESCRIBE database:ALTER |
| ALTER TABLE | database:describe table:describe table:alter database:create | database:DESCRIBE table:DESCRIBE table:ALTER database:CREATE_TABLE column:SELECT或table:SELECT | |
| ALTER VIEW | database:describe table:describe table:alter | database:DESCRIBE table:DESCRIBE column:SELECT table:ALTER | |
| CREATE DATABASE | database:describe database:create | database:DESCRIBE catalog:CREATE_DATABASE | |
| CREATE OR REPLACE FUNCTION (CREATE) | database:describe function:create | database:DESCRIBE database:CREATE_FUNC | |
| CREATE OR REPLACE FUNCTION (REPLACE) | database:describe function:describe function:alter | database:CREATE_FUNC database:DESCRIBE function:DESCRIBE function:ALTER | |
| CREATE TABLE | database:describe table:describe table:create | database:DESCRIBE database:CREATE_TABLE | |
| CREATE VIEW | database:describe table:describe table:drop table:create | database:CREATE_TABLE table:DESCRIBE（source\target） table:DROP(target) column:SELECT | |
| DROP DATABASE | database:describe database:drop | database:DESCRIBE database:DROP | |
| DROP FUNCTION | database:describe function:describe function:drop | database:DESCRIBE function:DESCRIBE function:DROP | |
| DROP TABLE | database:describe table:describe credential:describe table:drop | database:DESCRIBE table:DESCRIBE table:DROP | |
| DROP VIEW | database:describe table:describe table:drop | database:DESCRIBE table:DESCRIBE(target\source) table:DROP(target) | |
| REPAIR TABLE | database:describe table:describe credential:describe table:alter | database:DESCRIBE table:DESCRIBE table:ALTER table:SELECT | |
| TRUNCATE TABLE | database:describe table:describe table:alter | database:DESCRIBE table:DESCRIBE table:SELECT table:UPDATE | |
| DML语句 | INSERT TABLE | database:describe table:describe table:alter credential:describe | database:DESCRIBE table:DESCRIBE table:ALTER table:INSERT column:SELECT或table:SELECT |
| LOAD DATA | database:describe table:describe credential:describe | database:DESCRIBE table:DESCRIBE table:UPDATE table:ALTER table:SELECT | |
| DR语句 | SELECT | database:describe table:describe credential:describe | database:DESCRIBE table:DESCRIBE column:SELECT |
| EXPLAIN | 取决于执行sql | 取决于执行sql | |
| Auxiliary 语句 | ANALYZE TABLE | database:describe table:describe credential:describe table:alter | database:DESCRIBE table:DESCRIBE table:SELECT table:ALTER |
| DESCRIBE DATABASE | database:describe | database:DESCRIBE | |
| DESCRIBE FUNCTION | database:describe function:describe | database:DESCRIBE function:DESCRIBE | |
| DESCRIBE QUERY | database:describe table:describe | database:DESCRIBE table:DESCRIBE table:SELECT | |
| DESCRIBE TABLE | database:describe table:describe | database:DESCRIBE table:DESCRIBE | |
| REFRESH TABLE | database:describe table:describe credential:describe | database:DESCRIBE table:DESCRIBE table:SELECT | |
| REFRESH FUNCTION | database:describe function:describe | database:DESCRIBE function:DESCRIBE | |
| SHOW COLUMNS | database:describe table:describe | database:DESCRIBE table:DESCRIBE | |
| SHOW CREATE TABLE | database:describe table:describe | database:DESCRIBE table:DESCRIBE | |
| SHOW DATABASES | database:describe | catalog:LIST_DATABASE database:DESCRIBE | |
| SHOW FUNCTIONS | database:describe function:describe | database:DESCRIBE | |
| SHOW PARTITIONS | database:describe table:describe | database:DESCRIBE table:DESCRIBE | |
| SHOW TABLE EXTENDED | database:describe table:describe | catalog:LIST_DATABASE database:DESCRIBE table:DESCRIBE database:LIST_TABLE | |
| SHOW TABLES | database:describe table:describe | catalog:LIST_DATABASE database:LIST_TABLE database:DESCRIBE | |
| SHOW TBLPROPERTIES | database:describe table:describe | database:DESCRIBE table:DESCRIBE | |
| SHOW VIEWS | database:describe table:describe | catalog:LIST_DATABASE database:LIST_TABLE database:DESCRIBE |
