fix(glue): GetTableVersion permission not available for read (aws#10628)

Fix `glue:GetTableVersion` permission not available for read closes aws#10577 ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
Vboivin · Oct 3, 2020 · b0c5699 · b0c5699
1 parent 4d20079
commit b0c5699
Show file tree

Hide file tree

Showing 3 changed files with 8 additions and 0 deletions.
diff --git a/packages/@aws-cdk/aws-glue/lib/table.ts b/packages/@aws-cdk/aws-glue/lib/table.ts
@@ -406,6 +406,7 @@ const readPermissions = [
   'glue:GetPartitions',
   'glue:GetTable',
   'glue:GetTables',
+  'glue:GetTableVersion',
   'glue:GetTableVersions',
 ];
 

diff --git a/packages/@aws-cdk/aws-glue/test/integ.table.expected.json b/packages/@aws-cdk/aws-glue/test/integ.table.expected.json
@@ -474,6 +474,7 @@
                 "glue:GetPartitions",
                 "glue:GetTable",
                 "glue:GetTables",
+                "glue:GetTableVersion",
                 "glue:GetTableVersions",
                 "glue:BatchCreatePartition",
                 "glue:BatchDeletePartition",
@@ -551,6 +552,7 @@
                 "glue:GetPartitions",
                 "glue:GetTable",
                 "glue:GetTables",
+                "glue:GetTableVersion",
                 "glue:GetTableVersions",
                 "glue:BatchCreatePartition",
                 "glue:BatchDeletePartition",
@@ -663,6 +665,7 @@
                 "glue:GetPartitions",
                 "glue:GetTable",
                 "glue:GetTables",
+                "glue:GetTableVersion",
                 "glue:GetTableVersions",
                 "glue:BatchCreatePartition",
                 "glue:BatchDeletePartition",
@@ -740,6 +743,7 @@
                 "glue:GetPartitions",
                 "glue:GetTable",
                 "glue:GetTables",
+                "glue:GetTableVersion",
                 "glue:GetTableVersions",
                 "glue:BatchCreatePartition",
                 "glue:BatchDeletePartition",
@@ -784,6 +788,7 @@
                 "glue:GetPartitions",
                 "glue:GetTable",
                 "glue:GetTables",
+                "glue:GetTableVersion",
                 "glue:GetTableVersions",
                 "glue:BatchCreatePartition",
                 "glue:BatchDeletePartition",

diff --git a/packages/@aws-cdk/aws-glue/test/table.test.ts b/packages/@aws-cdk/aws-glue/test/table.test.ts
@@ -1185,6 +1185,7 @@ test('grants: read only', () => {
             'glue:GetPartitions',
             'glue:GetTable',
             'glue:GetTables',
+            'glue:GetTableVersion',
             'glue:GetTableVersions',
           ],
           Effect: 'Allow',
@@ -1393,6 +1394,7 @@ test('grants: read and write', () => {
             'glue:GetPartitions',
             'glue:GetTable',
             'glue:GetTables',
+            'glue:GetTableVersion',
             'glue:GetTableVersions',
             'glue:BatchCreatePartition',
             'glue:BatchDeletePartition',