Updates the permissions mode of a ledger.
See https://www.paws-r-sdk.com/docs/qldb_update_ledger_permissions_mode/ for full documentation.
qldb_update_ledger_permissions_mode(Name, PermissionsMode)
[required] The name of the ledger.
[required] The permissions mode to assign to the ledger. This parameter can have one of the following values:
ALLOW_ALL
: A legacy permissions mode that enables access control
with API-level granularity for ledgers.
This mode allows users who have the SendCommand
API permission for
this ledger to run all PartiQL commands (hence, ALLOW_ALL
) on any
tables in the specified ledger. This mode disregards any table-level
or command-level IAM permissions policies that you create for the
ledger.
STANDARD
: (Recommended) A permissions mode that enables access
control with finer granularity for ledgers, tables, and PartiQL
commands.
By default, this mode denies all user requests to run any PartiQL
commands on any tables in this ledger. To allow PartiQL commands to
run, you must create IAM permissions policies for specific table
resources and PartiQL actions, in addition to the SendCommand
API
permission for the ledger. For information, see Getting started with the standard permissions mode
in the Amazon QLDB Developer Guide.
We strongly recommend using the STANDARD
permissions mode to maximize
the security of your ledger data.