AWS lake-formation documentation change
Summary
Minor wording changes and clarification about IAM permissions for registering S3 locations. Fixed broken link markup and pluralization of 'locations'.
Security assessment
Clarifies IAM permission requirements (RegisterResource/CreateCatalog) and DATA_LOCATION_ACCESS grants, but doesn't indicate resolution of a specific security vulnerability.
Diff
diff --git a/lake-formation/latest/dg/s3tables-catalog-prerequisites.md b/lake-formation/latest/dg/s3tables-catalog-prerequisites.md index a680143d8..735dcbbe3 100644 --- a/lake-formation/latest/dg/s3tables-catalog-prerequisites.md +++ b/lake-formation/latest/dg/s3tables-catalog-prerequisites.md @@ -17 +17 @@ Following are the prerequisites to enable Amazon S3 table integration with AWS G - 2. Select a location, and from the **Actions** menu, choose **Remove**. + 2. Select a location, and on the **Actions** menu, choose **Remove**. @@ -23 +23 @@ For detailed instructions on deregistering a data location, see, the [Deregister - 4. Then, follow the updated integration steps in the [ Enabling Amazon S3 Tables integration ](./enable-s3-tables-catalog-integration.html) secton. + 4. Then, follow the updated integration steps in the [](./enable-s3-tables-catalog-integration.html) secton. @@ -25 +25 @@ For detailed instructions on deregistering a data location, see, the [Deregister - 2. When you enable the Amazon S3 tables integration, Lake Formation automatically registers the S3 tables' location. To register the table bucket location with Lake Formation, you need an IAM role/user with `RegisterResource` and `CreateCatalog` permissions. When a non-administrator user with these permissions registers a catalog location, Lake Formation automatically grants them the `DATA_LOCATION_ACCESS` permission for that location allowing the calling principal the permissions to perform all supported Lake Formation operations on the registered data location. + 2. When you enable the Amazon S3 tables integration, Lake Formation automatically registers the S3 tables' locations. To register S3 table bucket location with Lake Formation, you need an IAM role or IAM user with `RegisterResource` and `CreateCatalog` permissions. When a non-administrator user with these permissions registers a catalog location, Lake Formation automatically grants them the `DATA_LOCATION_ACCESS` permission for that location allowing the calling principal the permissions to perform all supported Lake Formation operations on the registered data location..