# Grant Permissions for A Glue Catalog Database
resource "aws_lakeformation_permissions" "prod_sme_temp_db_database_permissions" {
  for_each    = var.prod_sme_temp_db_access
  principal   = each.key
  permissions = sort(each.value.database_permissions)

  database {
    name = "prod_sme_temp_db"
  }
}

resource "aws_lakeformation_permissions" "prod_sme_temp_db_tables_permissions" {
  for_each    = var.prod_sme_temp_db_access
  principal   = each.key
  permissions = sort(each.value.table_permissions)

  table {
    database_name = "prod_sme_temp_db"
    wildcard      = true
  }
}