AWS lake-formation documentation change
Summary
Updated version reference from 'version 3' to 'version 3 or higher' for cross-account version settings, clarifying that the glue:ShareResource permission requirement applies to version 3 and above.
Security assessment
This is a routine documentation update to reflect version compatibility. It clarifies that a specific permission requirement applies to version 3 and later versions, but does not indicate any security vulnerability, incident, or weakness. The change is administrative and helps ensure accurate documentation for cross-account sharing prerequisites.
Diff
diff --git a/lake-formation/latest/dg/cross-account-prereqs.md b/lake-formation/latest/dg/cross-account-prereqs.md index 3401c3121..4889a43f5 100644 --- a//lake-formation/latest/dg/cross-account-prereqs.md +++ b//lake-formation/latest/dg/cross-account-prereqs.md @@ -72 +72 @@ You must have the `ram:EnableSharingWithAwsOrganization` permission to enable sh - * If you're currently using an AWS Glue Data Catalog resource policy to share resources, and you want to grant cross-account permissions using version 3 of the **Cross account version settings** , you must add the `glue:ShareResource` permission in the Data Catalog Settings using the `glue:PutResourcePolicy` API operation as shown in the [Managing cross-account permissions using both AWS Glue and Lake Formation](./hybrid-cross-account.html) section. This policy is not required if your account has made no cross-account grants using the AWS Glue Data Catalog resource policy (version 1 and version 2 use `glue:PutResourcePolicy` permission) to grant cross-account access. + * If you're currently using an AWS Glue Data Catalog resource policy to share resources, and you want to grant cross-account permissions using version 3 or higher of the **Cross account version settings** , you must add the `glue:ShareResource` permission in the Data Catalog Settings using the `glue:PutResourcePolicy` API operation as shown in the [Managing cross-account permissions using both AWS Glue and Lake Formation](./hybrid-cross-account.html) section. This policy is not required if your account has made no cross-account grants using the AWS Glue Data Catalog resource policy (version 1 and version 2 use `glue:PutResourcePolicy` permission) to grant cross-account access.