Skip to main content
print this page

Failed to provide Dataset Level Access for a domain.

· 2 min read
Fix Available
Fix Available
This bug has been fixed

While providing Dataset Level Access for a domain to users and groups, it is not providing the access. It is providing part of the datasets inside that domain before the error occurs. But it's not reverting back to these permissions when the error happens.

Affected Versions: 1.13, 1.14, 2.0, 2.1, 2.1.1

Fix Version: 2.2

Root cause(s)​

Providing Dataset Level Access is failing if there is a non-registered Lakeformation dataset. If a LF dataset is not registered, it won't have tables created in Lakeformation. While trying to provide access to a non-existing table, it gives this error: An error occurred (InvalidInputException) when calling the GrantPermissions operation: Table not found.

Impact​

  • Users will not get Dataset Level Access on Domains
  • Dataset Permissions mismatch between redshift and dynamodb

Mitigation​

Workaround

Make sure only 'RegistrationStatus' completed LF datasets are considered for Dataset Level Access.

Timeline​

gantt
    title Timeline
    dateFormat YYYY-MM-DD
    tickInterval 7day
    axisFormat %b-%d
    todayMarker off
    section Tracker
        %% update the ticket number and date of bug report
        CLOUD-3277 : done, 2023-04-26, 0d
    section Identification
        Reported : crit, 2023-04-26, 1d
    section Mitigation
        %% Update number of days took for each step below
        Root cause analysis : 2023-04-27, 1d
    section Delivery
        %% update the date of each step below
        testing complete: milestone, 2023-05-11, 0d
  • 2023-04-26: Bug reported/identified (CLOUD-3209)
  • 2023-04-26: Bug triaged
  • 2023-05-11: Bug fixed