AWS glue documentation change
Summary
Added 'AllowFullTableExternalDataAccess' parameter documentation and expanded ListCatalogs API parameter descriptions
Security assessment
Documents a security feature (third-party data access control via Lake Formation) but does not indicate resolution of a specific vulnerability. The ListCatalogs changes are functional updates without security implications.
Diff
diff --git a/glue/latest/dg/aws-glue-api-catalog-catalogs.md b/glue/latest/dg/aws-glue-api-catalog-catalogs.md index 697261e30..ff5889ea3 100644 --- a/glue/latest/dg/aws-glue-api-catalog-catalogs.md +++ b/glue/latest/dg/aws-glue-api-catalog-catalogs.md @@ -89,0 +90,4 @@ An array of `PrincipalPermissions` objects. Creates a set of default permissions + * `AllowFullTableExternalDataAccess` – UTF-8 string (valid values: `True` | `False`). + +Allows third-party engines to access data in Amazon S3 locations that are registered with Lake Formation. + @@ -130,0 +135,4 @@ An array of `PrincipalPermissions` objects. Creates a set of default permissions + * `AllowFullTableExternalDataAccess` – UTF-8 string (valid values: `True` | `False`). + +Allows third-party engines to access data in Amazon S3 locations that are registered with Lake Formation. + @@ -501 +509,7 @@ The maximum number of catalogs to return in one response. -When specified as true, iterates through the account and returns all catalog resources (including top-level resources and child resources) +Whether to list all catalogs across the catalog hierarchy, starting from the `ParentCatalogId`. Defaults to `false` . When `true`, all catalog objects in the `ParentCatalogID` hierarchy are enumerated in the response. + + * `IncludeRoot` – Boolean. + +Whether to list the default catalog in the account and region in the response. Defaults to `false`. When `true` and `ParentCatalogId = NULL | AWS Account ID`, all catalogs and the default catalog are enumerated in the response. + +When the `ParentCatalogId` is not equal to null, and this attribute is passed as `false` or `true`, an `InvalidInputException` is thrown.