AWS lake-formation documentation change

Service: lake-formation · 2025-08-16 · Documentation low

File: lake-formation/latest/dg/permissions-reference.md

Summary

Added JSON section markers and updated account ID placeholder (111122223333) in IAM role ARN examples

Security assessment

Changes involve formatting updates (JSON markers) and standardizing account ID placeholders. No evidence of addressing security vulnerabilities or introducing new security features.

Diff

diff --git a/lake-formation/latest/dg/permissions-reference.md b/lake-formation/latest/dg/permissions-reference.md
index 45733456d..b0f3e3f5a 100644
--- a//lake-formation/latest/dg/permissions-reference.md
+++ b//lake-formation/latest/dg/permissions-reference.md
@@ -146,0 +147,6 @@ This policy includes the following permissions.
+JSON
+    
+
+****
+    
+    
@@ -250,0 +258,6 @@ This policy includes the following permission.
+JSON
+    
+
+****
+    
+    
@@ -357,0 +372,6 @@ Inline policy (for creating the Lake Formation service-linked role) |
+JSON
+    
+
+****
+    
+    
@@ -369 +389 @@ Inline policy (for creating the Lake Formation service-linked role) |
-                    "arn:aws:iam::<account-id>:role/<workflow_role>"
+                    "arn:aws:iam::111122223333:role/<workflow_role>"
@@ -376,0 +398,6 @@ Inline policy (for creating the Lake Formation service-linked role) |
+JSON
+    
+
+****
+    
+    
@@ -399,0 +428,6 @@ Inline policy (basic) |
+JSON
+    
+
+****
+    
+    
@@ -463,0 +499,6 @@ Inline policy (basic) |
+JSON
+    
+
+****
+    
+    
@@ -496,0 +539,6 @@ Inline policy (for operations on governed tables, including operations within tr
+JSON
+    
+
+****
+    
+    
@@ -520,0 +570,6 @@ Inline policy (for metadata access control using the Lake Formation tag-based ac
+JSON
+    
+
+****
+    
+    
@@ -542,0 +599,6 @@ Inline policy (passrole policy for the workflow role) |
+JSON
+    
+
+****
+    
+    
@@ -554 +616 @@ Inline policy (passrole policy for the workflow role) |
-                    "arn:aws:iam::<account-id>:role/<workflow_role>"
+                    "arn:aws:iam::111122223333:role/<workflow_role>"
@@ -593,0 +657,6 @@ Inline policy (basic) |
+JSON
+    
+
+****
+    
+    
@@ -646,0 +717,6 @@ Inline policy (passrole policy for the workflow role) |
+JSON
+    
+
+****
+    
+    
@@ -658 +734 @@ Inline policy (passrole policy for the workflow role) |
-                    "arn:aws:iam::<account-id>:role/<workflow_role>"
+                    "arn:aws:iam::111122223333:role/<workflow_role>"
@@ -665,0 +743,6 @@ Inline policy (for ingesting data outside the data lake, for example, AWS CloudT
+JSON
+    
+
+****
+    
+