AWS boto3 - Resource : lakeformation Function : batch_revoke_permissions - Represent ALL_TABLES

Question

How do we represent "ALL_TABLES" in the lake_formation.batch_revoke_permissions function in boto3. Passing the argument as

{'Table': {'DatabaseName': 'XXXX', 'Name': 'ALL_TABLES' } }

It fails with the below error.

'Error': { 'ErrorCode': 'InvalidInputException', 'ErrorMessage': 'Table: ALL_TABLES not found.' }

Answer 1

From the documentation ,

Table (dict) -- The table for the resource. A table is a metadata definition that represents your data. You can Grant and Revoke table privileges to a principal.

CatalogId (string) -- The identifier for the Data Catalog. By default, it is the account ID of the caller.

DatabaseName (string) -- [REQUIRED] The name of the database for the table. Unique to a Data Catalog. A database is a set of associated table definitions organized into a logical group. You can Grant and Revoke database privileges to a principal.

Name (string) -- The name of the table.

TableWildcard (dict) -- A wildcard object representing every table under a database.

At least one of TableResource$Name or TableResource$TableWildcard is required.

you should set the 'TableWildcard': {} not the name.