LakeFormation / Client / get_temporary_glue_function_credentials

get_temporary_glue_function_credentials

LakeFormation.Client.get_temporary_glue_function_credentials(**kwargs)

Returns temporary credentials that you can use to download the artifacts of a user-defined function whose GovernanceMode is LAKE_FORMATION. Lake Formation assumes the role that you registered for the function’s ArtifactLocation. The credentials have read-only access to that location in Amazon S3.

To use this operation, you must have the EXECUTE permission on the function.

See also: AWS API Documentation

Request Syntax

response = client.get_temporary_glue_function_credentials(
    UserDefinedFunctionArn='string',
    AuditContext={
        'AdditionalAuditContext': 'string'
    }
)
Parameters:

  • UserDefinedFunctionArn (string) –

    [REQUIRED]

    The ARN of the user-defined function whose artifacts you want to download, in the format ``arn:aws:glue:region:account-id:userDefinedFunction/database-name/function-name ``.

  • AuditContext (dict) –

    Context for the request, such as the column names and query ID, that Lake Formation uses for auditing.

    • AdditionalAuditContext (string) –

      The filter engine can populate the ‘AdditionalAuditContext’ information with the request ID for you to track. This information will be displayed in CloudTrail log in your account.

Return type:

dict

Returns:

Response Syntax

{
    'AccessKeyId': 'string',
    'SecretAccessKey': 'string',
    'SessionToken': 'string',
    'Expiration': datetime(2015, 1, 1)
}

Response Structure

  • (dict) –

    • AccessKeyId (string) –

      The access key ID for the temporary credentials.

    • SecretAccessKey (string) –

      The secret key for the temporary credentials.

    • SessionToken (string) –

      The session token for the temporary credentials.

    • Expiration (datetime) –

      The date and time when the temporary credentials expire.

Exceptions