AWS glue documentation change
Summary
Added ARN format specifications for federated S3 tables, catalogs, databases, and multi-catalog resources
Security assessment
The changes document resource ARN structures for federated resources but do not address security vulnerabilities or introduce security features. This is a documentation clarification rather than a security-related update.
Diff
diff --git a/glue/latest/dg/glue-specifying-resource-arns.md b/glue/latest/dg/glue-specifying-resource-arns.md index 839a167c7..0399944d6 100644 --- a//glue/latest/dg/glue-specifying-resource-arns.md +++ b//glue/latest/dg/glue-specifying-resource-arns.md @@ -39,0 +40,13 @@ Table | `arn:aws:glue:`region`:`account-id`:table/`database name`/`table name`` +Federated S3 tables catalog (All table buckets) | `arn:aws:glue:`region`:`account-id`:catalog/s3tablescatalog` For example: `arn:aws:glue:us-east-1:123456789012:catalog/s3tablescatalog` +Federated S3 table bucket catalog (child catalog) | `arn:aws:glue:`region`:`account-id`:catalog/s3tablescatalog/`bucket name`` For example: `arn:aws:glue:us-east-1:123456789012:catalog/s3tablescatalog/amzn-s3-demo-bucket1` +Federated S3 tables database | `arn:aws:glue:`region`:`account-id`:database/s3tablescatalog/`child catalog name`/`database name`` For example: `arn:aws:glue:us-east-1:123456789012:database/s3tablescatalog/amzn-s3-demo-bucket1/nsdb1` +Federated S3 table | `arn:aws:glue:`region`:`account-id`:table/s3tablescatalog/`child catalog name`/`database name`/`table name`` For example: `arn:aws:glue:us-east-1:123456789012:table/s3tablescatalog/amzn-s3-demo-bucket1/nsdb1/s3tbl1` +Federated S3 tables catalog (A single table bucket registered with Lake Formation) | `arn:aws:glue:`region`:`account-id`:catalog`/`catalog name` For example: `arn:aws:glue:us-east-1:123456789012:catalog/amzn-s3-demo-bucket1` +Federated S3 tables database | `arn:aws:glue:`region`:`account-id`:catalog`/`catalog name`/`database name` For example: `arn:aws:glue:us-east-1:123456789012:database/amzn-s3-demo-bucket1/nsdb1` +Federated S3 table | `arn:aws:glue:`region`:`account-id`:catalog`/`catalog name`/`database name`/`table name` For example: `arn:aws:glue:us-east-1:123456789012:table/amzn-s3-demo-bucket1/`nsdb1`/s3tbl1` +Federated or managed catalog (top-level catalog in a multi-catalog) | `arn:aws:glue:`region`:`account-id`:catalog/`top-level catalog name`` For example: `arn:aws:glue:us-east-1:123456789012:catalog/nscatalog` ARN format for a managed catalog follows the same structure. +Federated multi-level catalog (child catalog in a multi-level catalog) | `arn:aws:glue:`region`:`account-id`:catalog/`top-level catalog name`/`child catalog name`` For example: `arn:aws:glue:us-east-1:123456789012:catalog/nscatalog/dbcatalog` +Federated database | `arn:aws:glue:`region`:`account-id`:database/`name space catalog name`/`child catalog name`/`database name`` For example: `arn:aws:glue:us-east-1:123456789012:database/nscatalog/dbcatalog/schemadb` +Federated table | `arn:aws:glue:`region`:`account-id`:table/`name space catalog name`/`child catalog name`/`database name`/`table name`` For example: `arn:aws:glue:us-east-1:123456789012:table/nscatalog/dbcatalog/schemadb/rstbl1` +Catalog link container | `arn:aws:glue:`region`:`account-id`:catalog`/`link container name` For example: `arn:aws:glue:glue:us-east-1:123456789012:catalog`/linkcontainer-example +Database | `arn:aws:glue:`region`:`account-id`:catalog`/`link container name`/`database name` For example: `arn:aws:glue:glue:us-east-1:123456789012:database`/linkcontainer-example/link-db