AWS lake-formation documentation change
Summary
Removed Glue resource-sharing policy JSON example
Security assessment
Example policy deletion does not indicate a security fix. Likely reflects updated implementation patterns.
Diff
diff --git a/lake-formation/latest/dg/share-dl-tbac-tutorial.md b/lake-formation/latest/dg/share-dl-tbac-tutorial.md index bfd59bc28..e78bbcb0a 100644 --- a//lake-formation/latest/dg/share-dl-tbac-tutorial.md +++ b//lake-formation/latest/dg/share-dl-tbac-tutorial.md @@ -274,42 +273,0 @@ First, create a policy document (such as policy.json) and add the preceding two -JSON - - -**** - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Effect": "Allow", - "Principal": { - "Service": "ram.amazonaws.com" - }, - "Action": "glue:ShareResource", - "Resource": [ - "arn:aws:glue:region:account-id:table/*/*", - "arn:aws:glue:region:account-id:database/*", - "arn:aws:glue:region:account-id:catalog" - ] - }, - { - "Effect": "Allow", - "Principal": { - "AWS": "region:account-id" - }, - "Action": "glue:*", - "Resource": [ - "arn:aws:glue:region:account-id:table/*/*", - "arn:aws:glue:region:account-id:database/*", - "arn:aws:glue:region:account-id:catalog" - ], - "Condition": { - "Bool": { - "glue:EvaluatedByLakeFormationTags": "true" - } - } - } - ] - } - -