AWS lake-formation documentation change
Summary
Expanded explanation of access control methods including LF-Tags and named resources
Security assessment
Added documentation about tag-based access control (LF-Tags), which is a security feature for managing permissions. This enhances security documentation but doesn't address a specific vulnerability.
Diff
diff --git a/lake-formation/latest/dg/bring-your-data-overview.md b/lake-formation/latest/dg/bring-your-data-overview.md index 179516214..3fb190b0a 100644 --- a//lake-formation/latest/dg/bring-your-data-overview.md +++ b//lake-formation/latest/dg/bring-your-data-overview.md @@ -11 +11,3 @@ The Data Catalog integrates with over 30 external data sources through federated -After cataloging the external data, you can use AWS Lake Formation to centrally manage data access permissions in the Data Catalog. Data lake administrators can grant fine-grained access permissions to other IAM principals (users or roles) within the same account or across accounts. IAM principals can then query the data using various AWS services such as Athena, Amazon EMR, or Redshift Spectrum. +After cataloging the external data, you can use AWS Lake Formation to centrally manage data access permissions in the Data Catalog. Data lake administrators can grant fine-grained access permissions to other IAM principals (users or roles) within the same account or across accounts using tag-based access control (LF-Tags) and named resources methods. + +By using LF-Tags data administrators can logically organize resources based on attributes such as domain and sensitivity level, simplifying permission management while ensuring consistent access controls across analytics and machine learning services including Athena, Amazon EMR, AWS Glue or Redshift Spectrum.