AWS clean-rooms documentation change
Summary
Added Lake Formation access control details and removed references to encrypted data preparation
Security assessment
While the change adds documentation about Lake Formation security controls (security feature documentation), there's no evidence of addressing a specific vulnerability. The removal of encryption references appears to be documentation cleanup rather than security-related changes.
Diff
diff --git a/clean-rooms/latest/userguide/create-config-table-athena.md b/clean-rooms/latest/userguide/create-config-table-athena.md index 4b8eac635..ee94c6936 100644 --- a//clean-rooms/latest/userguide/create-config-table-athena.md +++ b//clean-rooms/latest/userguide/create-config-table-athena.md @@ -6,0 +7,6 @@ +The Amazon Athena datasource option allows you to query data stored in Amazon S3, cataloged in the AWS Glue data catalog, and access controlled via AWS Lake Formation. Both tables and AWS Glue Data Catalog Views are supported. Lake Formation resource links can be used to share tables and views across AWS accounts and across AWS Regions to the AWS Clean Rooms member account that joins them to an AWS Clean Rooms collaboration. + +###### Note + +Only Amazon S3-based datasets can be queried via the Athena data source integration. + @@ -9 +15 @@ In this procedure, the [member](./glossary.html#glossary-member) does the follow - * Configures an existing Amazon Athena table for use in AWS Clean Rooms. (This step can be done before or after joining a collaboration, unless using Cryptographic Computing for Clean Rooms.) + * Configures an existing table or view in the AWS Glue Data Catalog for use the AWS Clean Rooms @@ -18,3 +24 @@ The following procedure assumes that: - * The collaboration member has already created a GDC View in Athena in the Athena `AwsDataCatalog` catalog. - - * (Optional) For [encrypted](./glossary.html#glossary-encryption) data tables only, the collaboration member has already [prepared encrypted data tables](./prepare-encrypted-data.html) using the C3R encryption client. + * The collaboration member has already created the AWS Glue Data Catalog database and table or GDC view.