使用AWS SDK for Python (Boto3)进行权限设置
示例代码:
- 获取文件夹的ARN
import boto3
client = boto3.client('quicksight', region_name='us-west-2')
response = client.describe_folder_permissions(FolderArn='arn:aws:quicksight:us-west-2:123456789012:folder/abcd1234-abcd-1234-abcd-1234567890ab')
print(response)
输出结果:
{
'FolderArn': 'arn:aws:quicksight:us-west-2:123456789012:folder/abcd1234-abcd-1234-abcd-1234567890ab',
'Permissions': [
{
'Principal': 'arn:aws:quicksight:us-west-2:123456789012:user/',
'Actions': [
'quicksight:DescribeFolder',
'quicksight:ListFolderMembers',
'quicksight:DescribeFolderPermissions',
'quicksight:UpdateFolderPermissions',
'quicksight:DeleteFolder',
'quicksight:CreateFolderMembership',
'quicksight:DeleteFolderMembership'
]
}
]
}
- 设置文件夹权限
import boto3
client = boto3.client('quicksight', region_name='us-west-2')
response = client.update_folder_permissions(
FolderArn='arn:aws:quicksight:us-west-2:123456789012:folder/abcd1234-abcd-1234-abcd-1234567890ab',
GrantPermissions=[
{
'Principal': 'arn:aws:quicksight:us-west-2:123456789012:user/',
'Actions': [
'quicksight:DescribeFolder',
'quicksight:ListFolderMembers',
'quicksight:DescribeFolderPermissions',
'quicksight:UpdateFolderPermissions',
'quicksight:DeleteFolder',
'quicksight:CreateFolderMembership',
'quicksight:DeleteFolderMembership'
]
}
],
RevokePermissions=[
{
'Principal': 'arn:aws:quicksight:us-west-2:123456789012:user/',
'Actions': [
'quicksight:DescribeFolder'
]
}
]
)
print(response)
输出结果:
{
'FolderArn': 'arn:aws:quicksight:us-west-2:123456789012:folder/abcd1234-abcd-1234-abcd-1234567890ab',
'Status