AWS glue documentation change
Summary
Added AuditContext structure and integration with Lake Formation security policies
Security assessment
The AuditContext structure and enhanced access control documentation directly relate to security auditing capabilities. This adds security feature documentation but doesn't indicate a fix for a specific vulnerability.
Diff
diff --git a/glue/latest/dg/aws-glue-api-catalog-tables.md b/glue/latest/dg/aws-glue-api-catalog-tables.md index fcd0da1a2..e390f8487 100644 --- a//glue/latest/dg/aws-glue-api-catalog-tables.md +++ b//glue/latest/dg/aws-glue-api-catalog-tables.md @@ -5 +5 @@ -— data types —TableTableInputFederatedTableColumnStorageDescriptorSchemaReferenceSerDeInfoOrderSkewedInfoTableVersionTableErrorTableVersionErrorSortCriterionTableIdentifierKeySchemaElementPartitionIndexPartitionIndexDescriptorBackfillErrorIcebergInputOpenTableFormatInputViewDefinitionViewDefinitionInputViewRepresentationViewRepresentationInputUpdateOpenTableFormatInputUpdateIcebergInputCreateIcebergTableInputUpdateIcebergTableInputIcebergSortOrderIcebergSortFieldIcebergPartitionSpecIcebergPartitionFieldIcebergSchemaIcebergStructFieldIcebergTableUpdate — operations —CreateTable (create_table)UpdateTable (update_table)DeleteTable (delete_table)BatchDeleteTable (batch_delete_table)GetTable (get_table)GetTables (get_tables)GetTableVersion (get_table_version)GetTableVersions (get_table_versions)DeleteTableVersion (delete_table_version)BatchDeleteTableVersion (batch_delete_table_version)SearchTables (search_tables)GetPartitionIndexes (get_partition_indexes)CreatePartitionIndex (create_partition_index)DeletePartitionIndex (delete_partition_index)GetColumnStatisticsForTable (get_column_statistics_for_table)UpdateColumnStatisticsForTable (update_column_statistics_for_table)DeleteColumnStatisticsForTable (delete_column_statistics_for_table) +— data types —TableTableInputFederatedTableColumnStorageDescriptorSchemaReferenceSerDeInfoOrderSkewedInfoTableVersionTableErrorTableVersionErrorSortCriterionTableIdentifierKeySchemaElementPartitionIndexPartitionIndexDescriptorBackfillErrorIcebergInputOpenTableFormatInputViewDefinitionViewDefinitionInputViewRepresentationViewRepresentationInputUpdateOpenTableFormatInputUpdateIcebergInputCreateIcebergTableInputUpdateIcebergTableInputIcebergSortOrderIcebergSortFieldIcebergPartitionSpecIcebergPartitionFieldIcebergSchemaIcebergStructFieldIcebergTableUpdateAuditContext — operations —CreateTable (create_table)UpdateTable (update_table)DeleteTable (delete_table)BatchDeleteTable (batch_delete_table)GetTable (get_table)GetTables (get_tables)GetTableVersion (get_table_version)GetTableVersions (get_table_versions)DeleteTableVersion (delete_table_version)BatchDeleteTableVersion (batch_delete_table_version)SearchTables (search_tables)GetPartitionIndexes (get_partition_indexes)CreatePartitionIndex (create_partition_index)DeletePartitionIndex (delete_partition_index)GetColumnStatisticsForTable (get_column_statistics_for_table)UpdateColumnStatisticsForTable (update_column_statistics_for_table)DeleteColumnStatisticsForTable (delete_column_statistics_for_table) @@ -82,0 +83,2 @@ The Table API describes data types and operations associated with tables. + * AuditContext structure + @@ -1093,0 +1096,21 @@ Updated key-value pairs of table properties and configuration settings for the I +## AuditContext structure + +A structure containing the Lake Formation audit context. + +###### Fields + + * `AdditionalAuditContext` – UTF-8 string, not more than 2048 bytes long. + +A string containing the additional audit context information. + + * `RequestedColumns` – An array of UTF-8 strings. + +The requested columns for audit. + + * `AllColumnsRequested` – Boolean. + +All columns request for audit. + + + + @@ -1424,0 +1448,4 @@ The time as of when to read the table contents. If not set, the most recent tran + * `AuditContext` – An AuditContext object. + +A structure containing the Lake Formation audit context. + @@ -1495,0 +1523,4 @@ The time as of when to read the table contents. If not set, the most recent tran + * `AuditContext` – An AuditContext object. + +A structure containing the Lake Formation audit context. + @@ -1747 +1778 @@ Searches a set of tables based on properties in the table metadata as well as on -You can only get tables that you have access to based on the security policies defined in Lake Formation. You need at least read-only access to the table for it to be returned. If you do not have access to all the columns in the table, these columns will not be searched against when returning the list of tables back to you. If you have access to the columns but not the data in the columns, those columns and the associated metadata for those columns will be included in the search. +You can only get tables that you have access to based on the security policies defined in Lake Formation. You need at least a read-only access to the table for it to be returned. If you do not have access to all the columns in the table, these columns will not be searched against when returning the list of tables back to you. If you have access to the columns but not the data in the columns, those columns and the associated metadata for those columns will be included in the search.