AWS clean-rooms documentation change
Summary
Replaced detailed Lake Formation permission setup steps with references to external guides
Security assessment
The change maintains security documentation by referencing authoritative sources but removes step-by-step instructions. No evidence of addressing a specific security vulnerability, just documentation reorganization.
Diff
diff --git a/clean-rooms/latest/userguide/setting-up-roles.md b/clean-rooms/latest/userguide/setting-up-roles.md index e3cafc82c..d449ff049 100644 --- a//clean-rooms/latest/userguide/setting-up-roles.md +++ b//clean-rooms/latest/userguide/setting-up-roles.md @@ -307 +307 @@ Your AWS Glue resources and underlying Athena resources must be in the same AWS -The service role must have **Select** and **Describe** access permissions on the GDC View and **Describe** permissions on the AWS Glue database that the GDC View is stored in. +If you query resources protected with Lake Formation permissions, the service role must have **Select** and **Describe** access permissions on the table/view and **Describe** permissions on the AWS Glue database the view is stored in. @@ -309 +309 @@ The service role must have **Select** and **Describe** access permissions on the -Set up Lake Formation permissions for a GDC View +For more information, see: @@ -310,0 +311 @@ Set up Lake Formation permissions for a GDC View + * [Use Athena to query data registered with AWS Lake Formation](https://docs.aws.amazon.com/athena/latest/ug/security-athena-lake-formation.html) in the _Amazon Athena User Guide_ @@ -312,33 +313 @@ Set up Lake Formation permissions for a GDC View -###### To set up Lake Formation permissions for a GDC View - - 1. Open the Lake Formation console at [https://console.aws.amazon.com/lakeformation/](https://console.aws.amazon.com/lakeformation/) - - 2. In the navigation pane, under **Data Catalog** , choose **Databases** , and then choose **Views**. - - 3. Choose your view, and then, under **Actions** , choose **Grant**. - - 4. For **Principals** , under **IAM user and roles** , choose your service role. - - 5. For **View permissions** , under **View permissions** , choose **Select** and **Describe**. - - 6. Choose **Grant**. - - - - -Set up Lake Formation permissions for the AWS Glue database that the GDC View is stored in - - -###### To set up Lake Formation permissions for the AWS Glue database that the GDC View is stored in - - 1. Open the Lake Formation console at [https://console.aws.amazon.com/lakeformation/](https://console.aws.amazon.com/lakeformation/) - - 2. In the navigation pane, under **Data Catalog** , choose **Databases**. - - 3. Choose the AWS Glue database, and then, under **Actions** , choose **Grant**. - - 4. For **Principals** , under **IAM user and roles** , choose your service role. - - 5. For **Database permissions** , under **Database permissions** , choose **Describe**. - - 6. Choose **Grant**. + * [Onboarding to Lake Formation permissions](https://docs.aws.amazon.com/lake-formation/latest/dg/onboarding-lf-permissions.html) in the _AWS Lake Formation Developer Guide_