AWS Security ChangesHomeSearch

AWS lake-formation documentation change

Service: lake-formation · 2025-08-28 · Documentation low

File: lake-formation/latest/dg/share-dl-tbac-tutorial.md

Summary

Removed Glue resource-sharing policy JSON example

Security assessment

Example policy deletion does not indicate a security fix. Likely reflects updated implementation patterns.

Diff

diff --git a/lake-formation/latest/dg/share-dl-tbac-tutorial.md b/lake-formation/latest/dg/share-dl-tbac-tutorial.md
index bfd59bc28..e78bbcb0a 100644
--- a//lake-formation/latest/dg/share-dl-tbac-tutorial.md
+++ b//lake-formation/latest/dg/share-dl-tbac-tutorial.md
@@ -274,42 +273,0 @@ First, create a policy document (such as policy.json) and add the preceding two
-JSON
-    
-
-****
-    
-    
-        {
-        "Version": "2012-10-17",
-        "Statement": [
-            {
-                "Effect": "Allow",
-                "Principal": {
-                    "Service": "ram.amazonaws.com"
-                },
-                "Action": "glue:ShareResource",
-                "Resource": [
-                    "arn:aws:glue:region:account-id:table/*/*",
-                    "arn:aws:glue:region:account-id:database/*",
-                    "arn:aws:glue:region:account-id:catalog"
-                ]
-            },
-            {
-                "Effect": "Allow",
-                "Principal": {
-                    "AWS": "region:account-id"
-                },
-                "Action": "glue:*",
-                "Resource": [
-                    "arn:aws:glue:region:account-id:table/*/*",
-                    "arn:aws:glue:region:account-id:database/*",
-                    "arn:aws:glue:region:account-id:catalog"
-                ],
-                "Condition": {
-                    "Bool": {
-                        "glue:EvaluatedByLakeFormationTags": "true"
-                    }
-                }
-            }
-        ]
-    }        
-    
-