AWS lake-formation documentation change
Summary
Changed 'Data Catalog resources' to 'Data Catalog objects' in text about LF-Tag creator permissions
Security assessment
Change appears to be terminology clarification from 'resources' to 'objects' without altering security implications or introducing new security content
Diff
diff --git a/lake-formation/latest/dg/TBAC-adding-tag-creator.md index ca6dbc5e9..a0c5db832 100644 --- a/lake-formation/latest/dg/TBAC-adding-tag-creator.md +++ b/lake-formation/latest/dg/TBAC-adding-tag-creator.md @@ -9 +9 @@ IAM permissions required to create LF-TagsAdd LF-Tag creators -By default, data lake administrators can create, update, and delete LF-Tags, assign tags to Data Catalog resources, and grant tag permissions to principals. If you wish to delegate the tag creation and management operations to non-admin principals, the data lake administrator can create LF-Tag creator roles and grant Lake Formation `Create LF-Tag` permission to the roles. With grantable `Create LF-Tag` permission, LF-Tag creators can delegate tag creation and maintenance tasks to other non-administrative principals. +By default, data lake administrators can create, update, and delete LF-Tags, assign tags to Data Catalog objects, and grant tag permissions to principals. If you wish to delegate the tag creation and management operations to non-admin principals, the data lake administrator can create LF-Tag creator roles and grant Lake Formation `Create LF-Tag` permission to the roles. With grantable `Create LF-Tag` permission, LF-Tag creators can delegate tag creation and maintenance tasks to other non-administrative principals.