Need to create the resource using terraform for AWS Lake formation -> Administration -> Administrative roles and tasks -> Database Creators

[sudipw]

Description

We are trying to create the Database creators for AWS Lake formation Administration tasks. But not able to figure out how we can do this using terraform code. Below are the screenshot for reference.

Requested Resource(s) and/or Data Source(s)

AWS Lake formation Administrative settings

Potential Terraform Configuration

No response

References

No response

Would you like to implement a fix?

None

[github-actions[bot]]

Community Note

Voting for Prioritization

• Please vote on this issue by adding a 👍 reaction to the original post to help the community and maintainers prioritize this request.
• Please see our prioritization guide for information on how we prioritize.
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request.

Volunteering to Work on This Issue

• If you are interested in working on this issue, please leave a comment.
• If this would be your first contribution, please review the contribution guide.

[Geartrixy]

I thought it might be something like this:

resource "aws_lakeformation_data_lake_settings" "example" {
  admins = [data.aws_iam_role.admin.arn]

  create_database_default_permissions {
    permissions = ["ALL"]
    principal   = "arn:aws:iam::123456789012:role/example-role-name"
  }
}

But this throws me the following error:

Error: creating Lake Formation data lake settings: creating Lake Formation data lake settings: InvalidInputException: Create Database Default not supported for principal

[hhagblom]

https://awscli.amazonaws.com/v2/documentation/api/latest/reference/lakeformation/put-data-lake-settings.html

The documentation above from amazon seem to suggest that the only valid value on the principal attribute is IAM_ALLOWED_PRINCIPALS which is a bit weird.