AWS prescriptive-guidance documentation change
Summary
Updated documentation links, fixed apostrophe formatting, corrected Lake Formation URLs, updated image paths, and changed section heading
Security assessment
The changes involve documentation maintenance including link corrections, formatting fixes, and image path updates. No security vulnerabilities are addressed, and no new security features are documented. The content still describes standard onboarding/access processes without security enhancements.
Diff
diff --git a/prescriptive-guidance/latest/data-lake-for-growth-scale/onboarding-access-process-flow.md b/prescriptive-guidance/latest/data-lake-for-growth-scale/onboarding-access-process-flow.md index fe98daa2e..a5c2867ce 100644 --- a//prescriptive-guidance/latest/data-lake-for-growth-scale/onboarding-access-process-flow.md +++ b//prescriptive-guidance/latest/data-lake-for-growth-scale/onboarding-access-process-flow.md @@ -5 +5 @@ -[Documentation](/index.html)[AWS Prescriptive Guidance](https://aws.amazon.com/prescriptive-guidance/)[Designing a data lake for growth and scale on the AWS Cloud](welcome.html) +[Documentation](/index.html)[AWS Prescriptive Guidance](https://aws.amazon.com/prescriptive-guidance/)[Designing a data lake for growth and scale on the AWS Cloud](introduction.html) @@ -11 +11 @@ Onboarding data producersOnboarding data consumersGrant Select access in a data -This guide’s data lake reference architecture helps you to independently scale data producers and data consumers, in addition to defining and establishing a consistent process for onboarding and granting access to those data consumers. +This guide's data lake reference architecture helps you to independently scale data producers and data consumers, in addition to defining and establishing a consistent process for onboarding and granting access to those data consumers. @@ -13 +13 @@ This guide’s data lake reference architecture helps you to independently scale -The following sections describe the onboarding process for data producers and data consumers and how to grant access in a data consumer account. This guide uses the [named resource method](https://docs.aws.amazon.com//lake-formation/latest/dg/granting-cat-perms-named-resource.html) between the centralized catalog and data consumers. The process for the [LF-TBAC method](https://docs.aws.amazon.com//lake-formation/latest/dg/granting-catalog-perms-TBAC.html) is similar but slightly different. We recommend that you evaluate and configure these approaches to meet your organization’s data governance practices and policies. +The following sections describe the onboarding process for data producers and data consumers and how to grant access in a data consumer account. This guide uses the [named resource method](https://docs.aws.amazon.com/lake-formation/latest/dg/granting-cat-perms-named-resource.html) between the centralized catalog and data consumers. The process for the [LF-TBAC method](https://docs.aws.amazon.com/lake-formation/latest/dg/granting-catalog-perms-TBAC.html) is similar but slightly different. We recommend that you evaluate and configure these approaches to meet your organization's data governance practices and policies. @@ -15 +15 @@ The following sections describe the onboarding process for data producers and da -For more information about these two methods, see the [Centralized catalog](./centralized-catalog.html) section of this guide. +For more information about these two methods, see the [Centralized catalog](./reference-architecture-components.html#centralized-catalog) section of this guide. @@ -21 +21 @@ The following diagram shows how to onboard a new data producer to your data lake - + @@ -25 +25 @@ The diagram shows the following onboarding process: - 1. The data producer selectively provides the centralized catalog with access to its data (for example, an Amazon Simple Storage Service (Amazon S3) bucket and AWS KMS key). Access is provided to the centralized catalog's AWS Identity and Access Management (IAM) principals to register the data producer’s data lake location in AWS Lake Formation and the IAM principals used to maintain the data producer's catalog. + 1. The data producer selectively provides the centralized catalog with access to its data (for example, an Amazon Simple Storage Service (Amazon S3) bucket and AWS KMS key). Access is provided to the centralized catalog's AWS Identity and Access Management (IAM) principals to register the data producer's data lake location in AWS Lake Formation and the IAM principals used to maintain the data producer's catalog. @@ -27 +27 @@ The diagram shows the following onboarding process: - 2. Register the data producer’s data lake location (for example, an S3 bucket) that uses the centralized catalog’s Lake Formation. + 2. Register the data producer's data lake location (for example, an Amazon S3 bucket) that uses the centralized catalog's Lake Formation. @@ -38 +38 @@ The following diagram shows how to onboard a new data consumer to your data lake - + @@ -44 +44 @@ The diagram shows the following onboarding process: - 2. The data producer’s data steward reviews the request from the data consumer and evaluates whether to: + 2. The data producer's data steward reviews the request from the data consumer and evaluates whether to: @@ -61 +61 @@ After the onboarding process is complete, the data consumer's Lake Formation adm -The following diagram shows the process for granting [`Select` access](https://docs.aws.amazon.com//lake-formation/latest/dg/granting-table-permissions.html) to shared data resources with a local IAM principal in the data consumer account. The local IAM principal can be the IAM role for individual users or an IAM role that is consumed by specific AWS services. +The following diagram shows the process for granting [Select access](https://docs.aws.amazon.com/lake-formation/latest/dg/granting-table-permissions.html) to shared data resources with a local IAM principal in the data consumer account. The local IAM principal can be the IAM role for individual users or an IAM role that is consumed by specific AWS services. @@ -67 +67 @@ When the data being shared is of low sensitivity, you can delegate access granti - + @@ -71 +71 @@ The diagram shows the following process: - 1. The individual IAM principal in the data consumer account requests `Select` access to the resource link from the IAM principal in the data consumer account. + 1. The individual IAM principal in the data consumer account requests Select access to the resource link from the IAM principal in the data consumer account. @@ -73 +73 @@ The diagram shows the following process: - 2. The data producer’s data steward reviews the request from the data consumer and provides approval if all requirements are met. + 2. The data producer's data steward reviews the request from the data consumer and provides approval if all requirements are met. @@ -75 +75 @@ The diagram shows the following process: - 3. `Select` access is granted and this allows the IAM principal to consume the requested data. + 3. Select access is granted and this allows the IAM principal to consume the requested data. @@ -86 +86 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Data consumers +Reference architecture components