Skip to content

Commit 4f8d696

Browse files
committed
update README.md
1 parent 12bf0ce commit 4f8d696

File tree

1 file changed

+20
-1
lines changed

1 file changed

+20
-1
lines changed

README.md

Lines changed: 20 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -332,7 +332,26 @@ command.
332332
* (10) [Apache Iceberg - Maintenance for streaming tables (v0.14.0)](https://iceberg.apache.org/docs/0.14.0/spark-structured-streaming/#maintenance-for-streaming-tables)
333333
* (11) [awsglue python package](https://github.com/awslabs/aws-glue-libs): The awsglue Python package contains the Python portion of the AWS Glue library. This library extends PySpark to support serverless ETL on AWS.
334334

335-
Enjoy!
335+
## Troubleshooting
336+
337+
* Granting database or table permissions error using AWS CDK
338+
* Error message:
339+
<pre>
340+
AWS::LakeFormation::PrincipalPermissions | CfnPrincipalPermissions Resource handler returned message: "Resource does not exist or requester is not authorized to access requested permissions. (Service: LakeFormation, Status Code: 400, Request ID: f4d5e58b-29b6-4889-9666-7e38420c9035)" (RequestToken: 4a4bb1d6-b051-032f-dd12-5951d7b4d2a9, HandlerErrorCode: AccessDenied)
341+
</pre>
342+
* Solution:
343+
344+
The role assumed by cdk is not a data lake administrator. (e.g., `cdk-hnb659fds-deploy-role-12345678912-us-east-1`) <br/>
345+
So, deploying PrincipalPermissions meets the error such as:
346+
347+
`Resource does not exist or requester is not authorized to access requested permissions.`
348+
349+
In order to solve the error, it is necessary to promote the cdk execution role to the data lake administrator.<br/>
350+
For example, https://github.com/aws-samples/data-lake-as-code/blob/mainline/lib/stacks/datalake-stack.ts#L68
351+
352+
* Reference:
353+
354+
[https://github.com/aws-samples/data-lake-as-code](https://github.com/aws-samples/data-lake-as-code) - Data Lake as Code
336355

337356
## Security
338357

0 commit comments

Comments
 (0)