AWS Security ChangesHomeSearch

AWS glue documentation change

Service: glue · 2026-03-28 · Documentation low

File: glue/latest/dg/catalog-level-optimizers.md

Summary

Added note that catalog-level optimizer settings are not inherited when AWS Glue Data Catalog encryption is enabled

Security assessment

This change documents a limitation when using AWS Glue Data Catalog encryption with catalog-level optimizers. It clarifies security feature interactions but doesn't address a specific security vulnerability. The change helps users understand that enabling encryption affects optimizer inheritance behavior.

Diff

diff --git a/glue/latest/dg/catalog-level-optimizers.md b/glue/latest/dg/catalog-level-optimizers.md
index b6110c6ba..e35aec047 100644
--- a//glue/latest/dg/catalog-level-optimizers.md
+++ b//glue/latest/dg/catalog-level-optimizers.md
@@ -22,0 +23,2 @@ When enabling catalog-level optimizers, consider the following:
+  * Catalog-level optimizer settings are not automatically inherited by tables when AWS Glue Data Catalog encryption is enabled. If your catalog has metadata encryption enabled, you must configure table optimizers individually for each table. To use catalog-level optimizer inheritance, metadata encryption must be disabled on the catalog.
+