AWS glue documentation change

Service: glue · 2025-08-28 · Documentation low

File: glue/latest/dg/data-quality-authorization.md

Summary

Removed detailed IAM policy examples for data quality operations and updated resource references

Security assessment

Policy example removal appears to be documentation cleanup rather than security-related. The bucket name change from placeholder to example ('YOUR-BUCKET-NAME' to 'amzn-s3-demo-bucket') is a documentation improvement without security implications.

Diff

diff --git a/glue/latest/dg/data-quality-authorization.md b/glue/latest/dg/data-quality-authorization.md
index 65cf48858..b66f6b82f 100644
--- a//glue/latest/dg/data-quality-authorization.md
+++ b//glue/latest/dg/data-quality-authorization.md
@@ -119,53 +118,0 @@ This example policy includes the permissions you need in order to generate recom
-JSON
-    
-
-****
-    
-    
-    
-    {
-      "Version": "2012-10-17",
-      "Statement": [
-        {
-          "Sid": "AllowGlueRuleRecommendationRunActions",
-          "Effect": "Allow",
-          "Action": [
-            "glue:GetDataQualityRuleRecommendationRun",
-            "glue:PublishDataQuality",
-            "glue:CreateDataQualityRuleset"
-          ],
-          "Resource": "arn:aws:glue:us-east-1:111122223333:dataQualityRuleset/*"
-        },
-    	{
-         "Sid": "AllowCatalogPermissions",
-         "Effect": "Allow",
-         "Action": [
-            "glue:GetPartitions",
-            "glue:GetTable"
-          ],
-          "Resource": [
-            "*"
-          ]
-        },
-        {
-          "Sid": "AllowS3GetObjectToRunRuleRecommendationTask",
-          "Effect": "Allow",
-          "Action": [
-            "s3:GetObject"
-          ],
-          "Resource": "arn:aws:s3:::aws-glue-*"
-        },
-    	{   // Optional for Logs
-            "Sid": "AllowPublishingCloudwatchLogs",
-            "Effect": "Allow",
-            "Action": [
-              "logs:CreateLogStream",
-              "logs:CreateLogGroup",
-              "logs:PutLogEvents"
-            ],
-            "Resource": "*"
-        },
-      ]
-    }
-    
-
@@ -250 +197 @@ JSON
-          "Resource": "arn:aws:s3:::YOUR-BUCKET-NAME/*"
+          "Resource": "arn:aws:s3:::amzn-s3-demo-bucket/*"
@@ -260,55 +206,0 @@ This example policy includes the permissions you need in order to run an data qu
-JSON
-    
-
-****
-    
-    
-    
-    {
-      "Version": "2012-10-17",
-      "Statement": [
-        {
-          "Sid": "AllowGluePublishDataQualityResult",
-          "Effect": "Allow",
-          "Action": [
-            "glue:PublishDataQuality"
-          ],
-          "Resource": "arn:aws:glue:us-east-1:111122223333:dataQualityRuleset/*"
-        },
-        //Optional to retrieve results, observation generation, 
-        //dynamic rules and DetectAnomalies
-        {
-          "Sid": "AllowGlueGetDataQualityResult",
-          "Effect": "Allow",
-          "Action": [
-            "glue:GetDataQualityResult"
-          ],
-          "Resource": "arn:aws:glue:us-east-1:111122223333:dataQualityRuleset/*"
-        },
-        //Optional to allow annotating statistics
-        {
-          "Sid": "AllowGlueDataQualityStatisticAnnotation",
-          "Effect": "Allow",
-          "Action": [
-            "glue:PutDataQualityStatisticAnnotation"
-          ],
-          "Resource": [
-            "arn:aws:glue:us-east-1:111122223333:dataQualityRuleset/*",
-            "arn:aws:glue:us-east-1:111122223333::job/{JobName}"
-          ]
-        },
-        //Optional to allow annotating all statistics in a profile
-        {
-          "Sid": "AllowGlueDataQualityProfileAnnotation",
-          "Effect": "Allow",
-          "Action": [
-            "glue:PutDataQualityProfileAnnotation"
-          ],
-          "Resource": [
-            "arn:aws:glue:us-east-1:111122223333:dataQualityRuleset/*",
-            "arn:aws:glue:us-east-1:111122223333::job/{JobName}"
-          ]
-        }
-    }
-    
-