GlueJobRunnerSession 无权执行：lakeformation:GetDataAccess on resource

Question

我正在尝试在我的 aws 胶水作业中使用glueContext.purge_table 函数。每当执行作业时，它都会引发以下错误：

An error occurred while calling o82.purgeTable.
: java.lang.RuntimeException: class com.amazonaws.services.gluejobexecutor.model.AccessDeniedException:User: arn:aws:sts::012345678:assumed-role/XYZ/GlueJobRunnerSession is not authorized to perform: lakeformation:GetDataAccess on resource: arn:aws:glue:us-east-1:MICHIGAN_DEFAULT_CATALOG_ID_RANDOMIZED:table/database/table (Service: AWSLakeFormation; Status Code: 400; Error Code: AccessDeniedException; Request ID: 25829fe6-2a10-430a-b050-023c13bcc8ce; Proxy: null) (Service: AWSGlueJobExecutor; Status Code: 400; Error Code: AccessDeniedException; Request ID: ed60ddfa-8263-486a-b9f6-1dd57cbfd9bd; Proxy: null)

以下政策已附加到该角色：

任何帮助将不胜感激。

Answer 1

您还需要为您的工作角色提供完整的LakeFormation 访问权限，因为您似乎有LakeFormation 处于活动状态。