AWS LakeFormation CatalogID for S3Tables

[overflowz]

Describe the bug

When trying to grant permissions to LakeFormation and specifying --catalog-id as ${account_id}:s3tablescatalog/foo, it fails with error:

An error occurred (InvalidInputException) when calling the GrantPermissions operation: Catalog id must be a valid AWS account id.

Regression Issue

• Select this option if this issue appears to be a regression.

Expected Behavior

grant-permissions should also accept s3tablescatalog catalog ids.

Current Behavior

An error occurred (InvalidInputException) when calling the GrantPermissions operation: Catalog id must be a valid AWS account id.

Reproduction Steps

aws lakeformation grant-permissions --region XXX --resource '{"Catalog":{}}' --catalog-id "${account_id}:s3tablescatalog/foo" --permissions "SUPER_USER" --principal "DataLakePrincipalIdentifier=role_arn"

Possible Solution

No response

Additional Information/Context

No response

CLI version used

aws-cli/2.27.60 Python/3.13.5 Linux/6.15.8

Environment details (OS name and version, etc.)

Arch Linux

[RyanFitzSimmonsAK]

Hi @overflowz, thanks for reaching out. I was able to reproduce this issue, and have reached out to the service team for guidance on how to grant these permissions. I'll let you know when I have any updates.

Ticket # for internal use : P283885037