Merge pull request #63 from moj-analytical-services/add-CaDeT-require…

…d-permissions Very slightly expand standard athena permissions
moj-analytical-services · Jul 1, 2024 · c7135ce · c7135ce
2 parents d4a3684 + 576dfde
commit c7135ce
Show file tree

Hide file tree

Showing 8 changed files with 11 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -5,6 +5,10 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/)
 and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.html).
 
+## v4.8.0
+
+- Updates standard athena policy to add 'glue:GetTableVersions'
+
 ## v4.7.0
 
 - Add London region for Amazon Bedrock

diff --git a/examples/iam_policy.json b/examples/iam_policy.json
@@ -85,6 +85,7 @@
                 "glue:GetDatabase",
                 "glue:GetDatabases",
                 "glue:GetTable",
+                "glue:GetTableVersions",
                 "glue:GetTables",
                 "glue:GetPartition",
                 "glue:GetPartitions",

diff --git a/iam_builder/templates.py b/iam_builder/templates.py
@@ -268,6 +268,7 @@ def get_athena_read_access(dump_bucket: list) -> dict:
                     "glue:GetDatabase",
                     "glue:GetDatabases",
                     "glue:GetTable",
+                    "glue:GetTableVersions",
                     "glue:GetTables",
                     "glue:GetPartition",
                     "glue:GetPartitions",

diff --git a/pyproject.toml b/pyproject.toml
@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "iam_builder"
-version = "4.7.0"
+version = "4.8.0"
 description = "A lil python package to generate iam policies"
 authors = ["Karik Isichei <[email protected]>"]
 license = "MIT"

diff --git a/tests/expected_policy/all_config.json b/tests/expected_policy/all_config.json
@@ -85,6 +85,7 @@
                 "glue:GetDatabase",
                 "glue:GetDatabases",
                 "glue:GetTable",
+                "glue:GetTableVersions",
                 "glue:GetTables",
                 "glue:GetPartition",
                 "glue:GetPartitions",

diff --git a/tests/expected_policy/athena_full_access.json b/tests/expected_policy/athena_full_access.json
@@ -85,6 +85,7 @@
                 "glue:GetDatabase",
                 "glue:GetDatabases",
                 "glue:GetTable",
+                "glue:GetTableVersions",
                 "glue:GetTables",
                 "glue:GetPartition",
                 "glue:GetPartitions",

diff --git a/tests/expected_policy/athena_read_only.json b/tests/expected_policy/athena_read_only.json
@@ -85,6 +85,7 @@
                 "glue:GetDatabase",
                 "glue:GetDatabases",
                 "glue:GetTable",
+                "glue:GetTableVersions",
                 "glue:GetTables",
                 "glue:GetPartition",
                 "glue:GetPartitions",

diff --git a/tests/expected_policy/athena_two_dumps.json b/tests/expected_policy/athena_two_dumps.json
@@ -87,6 +87,7 @@
                 "glue:GetDatabase",
                 "glue:GetDatabases",
                 "glue:GetTable",
+                "glue:GetTableVersions",
                 "glue:GetTables",
                 "glue:GetPartition",
                 "glue:GetPartitions",