List Lake Formation data filters (or TBAC column access) on a dataset

GET 
/datasets/:id/data-permissions

Returns Lake Formation data-cell filters for the dataset when is_tbac is omitted/false. Caller must have access to the dataset. Owners/editors see all filters; read-only callers only see filters whose EffectiveTags grant them access. Not supported when the dataset is TBAC-enabled (unless is_tbac=true, which returns TBAC column-tag access instead of LF filters). Not paginated: the handler returns the full visible filter list in one response (no limit/offset/nextToken). Treat an empty array as no filters.

Request

Responses

200

JSON array of data-filter records for the dataset (schema DataPermissionsResponse). Empty array means no filters (or none visible to a read-only caller). Each item includes SystemName (Lake Formation filter name), EffectiveTags, TotalColumns, and nested DataPermissions. When is_tbac=true, the body is the TBAC column-access payload instead of this array.

Response Headers

Access-Control-Allow-Origin
Access-Control-Allow-Methods
Access-Control-Allow-Headers

400

Validation or authorization failure. Body is {"Message": ""} or {"Message": " - "}. Common cases: not authorized to view dataset data permissions; GE-1034 when listing LF filters on a TBAC-enabled dataset without is_tbac=true; dataset not found / inactive via is_dataset_valid errors.

Response Headers

Access-Control-Allow-Origin
Access-Control-Allow-Methods
Access-Control-Allow-Headers

500

Backend/generic failure. Body is typically {"Message": " - "}.

Response Headers

Access-Control-Allow-Origin
Access-Control-Allow-Methods
Access-Control-Allow-Headers