@SdkInternalApi
    final GetDataAccessResult executeGetDataAccess(GetDataAccessRequest getDataAccessRequest) {

        ExecutionContext executionContext = createExecutionContext(getDataAccessRequest);
        AWSRequestMetrics awsRequestMetrics = executionContext.getAwsRequestMetrics();
        awsRequestMetrics.startEvent(Field.ClientExecuteTime);
        Request<GetDataAccessRequest> request = null;
        Response<GetDataAccessResult> response = null;

        try {
            awsRequestMetrics.startEvent(Field.RequestMarshallTime);
            try {
                request = new GetDataAccessRequestMarshaller().marshall(super.beforeMarshalling(getDataAccessRequest));
                // Binds the request metrics to the current request.
                request.setAWSRequestMetrics(awsRequestMetrics);
                request.addHandlerContext(HandlerContextKey.CLIENT_ENDPOINT, endpoint);
                request.addHandlerContext(HandlerContextKey.ENDPOINT_OVERRIDDEN, isEndpointOverridden());
                request.addHandlerContext(HandlerContextKey.SIGNING_REGION, getSigningRegion());
                request.addHandlerContext(HandlerContextKey.SERVICE_ID, "S3 Control");
                request.addHandlerContext(HandlerContextKey.OPERATION_NAME, "GetDataAccess");
                request.addHandlerContext(HandlerContextKey.ADVANCED_CONFIG, advancedConfig);

            } finally {
                awsRequestMetrics.endEvent(Field.RequestMarshallTime);
            }

            URI endpointTraitHost = null;
            if (!clientConfiguration.isDisableHostPrefixInjection()) {
                ValidationUtils.assertStringNotEmpty(getDataAccessRequest.getAccountId(), "AccountId");
                HostnameValidator.validateHostnameCompliant(getDataAccessRequest.getAccountId(), "AccountId", "getDataAccessRequest");

                String hostPrefix = "{AccountId}.";
                String resolvedHostPrefix = String.format("%s.", getDataAccessRequest.getAccountId());

                endpointTraitHost = UriResourcePathUtils.updateUriHost(endpoint, resolvedHostPrefix);
            }

            StaxResponseHandler<GetDataAccessResult> responseHandler = new com.amazonaws.services.s3control.internal.S3ControlStaxResponseHandler<GetDataAccessResult>(
                    new GetDataAccessResultStaxUnmarshaller());

            response = invoke(request, responseHandler, executionContext, null, endpointTraitHost);

            return response.getAwsResponse();

        } finally {

            endClientExecution(awsRequestMetrics, request, response);
        }
    }
<p>
Returns a temporary access credential from S3 Access Grants to the grantee or client application. The <a
href="https://docs.aws.amazon.com/STS/latest/APIReference/API_Credentials.html">temporary credential</a> is an
Amazon Web Services STS token that grants them access to the S3 data.
</p>
<dl>
<dt>Permissions</dt>
<dd>
<p>
You must have the <code>s3:GetDataAccess</code> permission to use this operation.
</p>
</dd>
<dt>Additional Permissions</dt>
<dd>
<p>
The IAM role that S3 Access Grants assumes must have the following permissions specified in the trust policy when
registering the location: <code>sts:AssumeRole</code>, for directory users or groups <code>sts:SetContext</code>,
and for IAM users or roles <code>sts:SetSourceIdentity</code>.
</p>
</dd>
</dl>

@param getDataAccessRequest
@return Result of the GetDataAccess operation returned by the service.
@sample AWSS3Control.GetDataAccess
@see <a href="http://docs.aws.amazon.com/goto/WebAPI/s3control-2018-08-20/GetDataAccess" target="_top">AWS API
     Documentation</a>
aws-java-sdk-s3control/src/main/java/com/amazonaws/services/s3control/AWSS3ControlClient.java