Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow dbt-athena to grant permissions via lakeformation named resource method #538

Open
nicor88 opened this issue Dec 12, 2023 · 0 comments
Labels
feature New feature or request

Comments

@nicor88
Copy link
Member

nicor88 commented Dec 12, 2023

Context

We want to leverage dbt-athena to don't only overwrite tags, but at time, also grant permissions to specific IAM principal.

The challange when using https://docs.aws.amazon.com/lake-formation/latest/dg/tut-named-resource-method.html is that grant can be lost when a table is dropped and re-created, and that's the case with dbt when running table materialization, or full-refresh incremental models

Requirements

  • extend LfGrantsConfig to support ResourcePermissionsConfig
  • resource_permissions can follow this
resource_permissions:
   - principal_arn: xxxx
     permissions: 
       - select
       - describe
     grantable_permissions:
       - select
       - describe
  - principal_arn: zzz
     permissions: 
       - select
       - describe
  • unit tests are provided
@nicor88 nicor88 added the feature New feature or request label Dec 12, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
feature New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant