LakeFormation / Client / update_lf_tag_expression

update_lf_tag_expression#

LakeFormation.Client.update_lf_tag_expression(**kwargs)#

Updates the name of the LF-Tag expression to the new description and expression body provided. Updating a LF-Tag expression immediately changes the permission boundaries of all existing LFTagPolicy permission grants that reference the given LF-Tag expression.

Request Syntax

response = client.update_lf_tag_expression(
    Name='string',
    Description='string',
    CatalogId='string',
    Expression=[
        {
            'TagKey': 'string',
            'TagValues': [
                'string',
            ]
        },
    ]
)

Parameters:

Name (string) –
[REQUIRED]

The name for the LF-Tag expression.
Description (string) – The description with information about the saved LF-Tag expression.
CatalogId (string) – The identifier for the Data Catalog. By default, the account ID.
Expression (list) –
[REQUIRED]

The LF-Tag expression body composed of one more LF-Tag key-value pairs.
- (dict) –
  
  A structure that allows an admin to grant user permissions on certain conditions. For example, granting a role access to all columns that do not have the LF-tag ‘PII’ in tables that have the LF-tag ‘Prod’.
  - TagKey (string) – [REQUIRED]
    
    The key-name for the LF-tag.
  - TagValues (list) – [REQUIRED]
    
    A list of possible values an attribute can take.
    
    The maximum number of values that can be defined for a LF-Tag is 1000. A single API call supports 50 values. You can use multiple API calls to add more values.
    - (string) –

Return type:

dict

Returns:

Response Syntax

{}

Response Structure

(dict) –

Exceptions

LakeFormation.Client.exceptions.EntityNotFoundException
LakeFormation.Client.exceptions.InvalidInputException
LakeFormation.Client.exceptions.ResourceNumberLimitExceededException
LakeFormation.Client.exceptions.InternalServiceException
LakeFormation.Client.exceptions.OperationTimeoutException
LakeFormation.Client.exceptions.AccessDeniedException