Create a Lake Formation data filter on a dataset

POST 
/datasets/:id/data-permissions

Creates a Lake Formation data-cells filter and starts the async data-permission grant workflow (Step Functions). Caller (role_id) must be owner or editor of the dataset. Not supported for TBAC-enabled datasets. Name must not contain whitespace; Lake Formation filter name is derived as {Domain}{DatasetName}{Name} (truncated to 255). Not idempotent: recreating an existing filter name fails in Lake Formation (DS-1079).

Request

Responses

200

Data filter created in Lake Formation and metadata persisted; async tag grant/prepare workflow started. Message is "Data Permission create process started".

Response Headers

Access-Control-Allow-Origin
Access-Control-Allow-Methods
Access-Control-Allow-Headers

400

Validation or authorization failure. Body is {"Message": " - "} or a plain Message for some auth failures. Codes include IPV-1055 (missing Name/Columns/Rows/AuthorizedTags), IPV-1060 (wrong types), IPV-1007 (Name contains whitespace), IPV-1059 (invalid column names), IPV-1045 (empty Rows.Expression), AUTH-1010 (tag not eligible for data filter), DS-1079 (Lake Formation create failure), plus "Not authorized to create dataset data permissions" and GE-1034 for TBAC datasets.

Response Headers

Access-Control-Allow-Origin
Access-Control-Allow-Methods
Access-Control-Allow-Headers

500

Backend failure (e.g. DB-1002 when persisting the data filter metadata fails).

Response Headers

Access-Control-Allow-Origin
Access-Control-Allow-Methods
Access-Control-Allow-Headers