AWS solutions documentation change
Summary
Updated cost tables with new resource entries (Audit Trail, LakeFormation Settings, DataOps Project, DataOps Crawler, Roles) and adjusted pricing values. Changed date reference from August 2025 to November 2025.
Security assessment
Added 'Audit Trail' resource explicitly mentions secure S3-based implementation. 'LakeFormation Settings' introduces IAM access control delegation for Glue resources. 'Roles' entry documents IAM policies for data access control. No evidence of addressing existing vulnerabilities.
Diff
diff --git a/solutions/latest/modern-data-architecture-accelerator/cost.md b/solutions/latest/modern-data-architecture-accelerator/cost.md index 55e365e38..cf83b7c2c 100644 --- a//solutions/latest/modern-data-architecture-accelerator/cost.md +++ b//solutions/latest/modern-data-architecture-accelerator/cost.md @@ -9 +9 @@ Example cost tables -You are responsible for the cost of AWS services used while running this solution. As of August 2025, costs primarily depend on the resources used, data processed, transferred, and stored. +You are responsible for the cost of AWS services used while running this solution. As of November 2025, costs primarily depend on the resources used, data processed, transferred, and stored. @@ -29,6 +29,10 @@ Resources | Monthly cost [USD] -**Glue Catalog** \- Configures the Encryption at Rest settings for Glue Catalog at the account level. Additionally, configures Glue catalogs for cross account access required by a Data Mesh architecture. | $0.90 -**Audit** \- Configures and deploys Audit resources to use as target for audit data and for querying audit data via Athena | $0.90 -**Datalake KMS and Buckets** \- Configures and deploys a set of encrypted data lake buckets and bucket policies. Bucket policies are suitable for direct access via IAM and/or federated roles, as well as indirect access via LakeFormation/Athena. | $0.90 -**Athena Workgroup** \- Configures and deploys Athena Workgroups for use on the Data Lake | $0.90 -**Data Science Team/Project** \- Deploys resource to support a team’s Data Science activities | $0.90 -**Total** | **$4.50** * +**Glue Catalog** \- Configures the Encryption at Rest settings for Glue Catalog at the account level. Additionally, configures Glue catalogs for cross account access required by a Data Mesh architecture. | $1 +**Audit** \- Configures and deploys Audit resources to use as target for audit data and for querying audit data via Athena | $1 +**Audit Trail** \- Configures and deploys resources to define a secure S3-based Audit Trail on AWS | $0 +**Datalake KMS and Buckets** \- Configures and deploys a set of encrypted data lake buckets and bucket policies. Bucket policies are suitable for direct access via IAM and/or federated roles, as well as indirect access via LakeFormation/Athena. | $0 +**Athena Workgroup** \- Configures and deploys Athena Workgroups for use on the Data Lake | $1 +**LakeFormation Settings** \- Configures LakeFormation to automatically generate IAMAllowedPrincipal grants on new databases and tables, delegating Glue resource access controls to IAM. | $0 +**DataOps Project** \- Deploys Glue databases and related resources to support data operations | $0 +**DataOps Crawler** \- Deploys Glue Crawler resources for data discovery and cataloging | $0 +**Roles** \- Deploys IAM roles and managed policies for data access control | $0 +**Total** | **$3** * @@ -40,6 +44,9 @@ Resources | Monthly cost [USD] -**Glue Catalog** \- Configures the Encryption at Rest settings for Glue Catalog at the account level. Additionally, configures Glue catalogs for cross account access required by a Data Mesh architecture. | $0.90 -**Audit** \- Configures and deploys Audit resources to use as target for audit data and for querying audit data via Athena | $0.90 -**Datalake KMS and Buckets** \- Configures and deploys a set of encrypted data lake buckets and bucket policies. Bucket policies are suitable for direct access via IAM and/or federated roles, as well as indirect access via LakeFormation/Athena. | $0.90 -**Athena Workgroup** \- Configures and deploys Athena Workgroups for use on the Data Lake | $0.90 -**Data Science Team/Project** \- Deploys resource to support a team’s Data Science activities | $0.90 -**Total** | **$5.40** * +**Glue Catalog** \- Configures the Encryption at Rest settings for Glue Catalog at the account level. Additionally, configures Glue catalogs for cross account access required by a Data Mesh architecture. | $1 +**Audit** \- Configures and deploys Audit resources to use as target for audit data and for querying audit data via Athena | $1 +**Audit Trail** \- Configures and deploys resources to define a secure S3-based Audit Trail on AWS | $0 +**Datalake KMS and Buckets** \- Configures and deploys a set of encrypted data lake buckets and bucket policies. Bucket policies are suitable for direct access via IAM and/or federated roles, as well as indirect access via LakeFormation/Athena. | $0 +**Athena Workgroup** \- Configures and deploys Athena Workgroups for use on the Data Lake | $1 +**LakeFormation Settings** \- Configures LakeFormation to automatically generate IAMAllowedPrincipal grants on new databases and tables, delegating Glue resource access controls to IAM. | $0 +**Data Science Team/Project** \- Deploys resource to support a team’s Data Science activities | $0 +**Roles** \- Deploys IAM roles and managed policies for data access control | $0 +**Total** | **$3** *