readmes

ExpediaGroup · Mar 3, 2025 · 1213ab2 · 1213ab2
1 parent 4be6811
commit 1213ab2
Show file tree

Hide file tree

Showing 3 changed files with 12 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -3,6 +3,14 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/) and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.html).
 
+## [7.9.6] - 2025-02-26
+### Added
+- AWS Lake Formation resources created per database if `create_lf_resource` enabled.
+- HMS Glue sync listener Lake Formation permissions to create Glue tables if `disable_glue_db_init` & `create_lf_resource`.
+- Added `lf_hybrid_access_enabled` to enable Hybrid access in Lake Formation.
+- Upgraded providers
+  - hashicorp/aws to `5.17.0` (was `4.0`)
+
 ## [7.9.6] - 2025-02-26
 ### Fixed
 - Expiration will be 0 when the S3 lifecycle rule is disabled.

diff --git a/README.md b/README.md
@@ -15,6 +15,7 @@ For more information please refer to the main [Apiary](https://github.com/Expedi
   * Gluesync  - A metastore event listener to replay Hive metadata events in a Glue catalog.
   * Metastore authorization - A metastore pre-event listener to handle authorization using Ranger.
   * Grafana dashboard - If deployed in EKS, a Grafana dashboard will be created that shows S3 bucket sizes for each Apiary bucket.
+  * Lake Formation - Databases will be synced in Lake formation as resources to enhance access control.
 
 ## Variables
 Please refer to [VARIABLES.md](VARIABLES.md).

diff --git a/VARIABLES.md b/VARIABLES.md
@@ -27,7 +27,9 @@
 | atlas\_kafka\_bootstrap\_servers                          | Kafka instance url.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `string`                 | `""`                                                                                                                                                                                                                                                                                           |    no    |
 | aws\_region                                               | AWS region.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             | `string`                 | n/a                                                                                                                                                                                                                                                                                            |   yes    |
 | apiary\_common\_producer\_iamroles                        | AWS IAM roles allowed general (not tied to schema) write access to managed Apiary S3 buckets.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           | `list(string)`           | `[]`                                                                                                                                                                                                                                                                                           |    no    |
-| disable\_glue\_db_init                                          | Glue databases are created programatically by default in hms-readwrite bootstrap init action. Setting this variable to true will disable the hms-readwrite bootstrap init action and create Glue databases via Terraform.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `bool`                   | `false`                                                                                                                                                                                                                                                                                        |    no    |
+| disable\_glue\_db\_init                                          | Glue databases are created programatically by default in hms-readwrite bootstrap init action. Setting this variable to true will disable the hms-readwrite bootstrap init action and create Glue databases via Terraform.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `bool`                   | `false`                                                                                                                                                                                                                                                                                        |    no    |
+| create\_lf\_resource                                          | All available schemas will be registered in Lake Formation as resources if this is enabled.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `bool`                   | `false`                                                                                                                                                                                                                                                                                        |    no    |
+| lf\_hybrid\_access\_enabled                                          | Lake Formation Hybrid access will be set to `true` in Lake formation resources.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | `bool`                   | `false`                                                                                                                                                                                                                                                                                        |    no    |
 | dashboard\_namespace                                      | k8s namespace to deploy grafana dashboard.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              | `string`                 | `"monitoring"`                                                                                                                                                                                                                                                                                 |    no    |
 | db\_apply\_immediately                                    | Specifies whether any cluster modifications are applied immediately, or during the next maintenance window.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             | `bool`                   | `false`                                                                                                                                                                                                                                                                                        |    no    |
 | db\_backup\_retention                                     | The number of days to retain backups for the RDS Metastore DB.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | `string`                 | `"7"`                                                                                                                                                                                                                                                                                          |   yes    |