Sharing data with multiple AWS accounts using AWS Lake Formation permissions
In this section, you will learn how to share data with multiple AWS accounts using AWS Lake Formation permissions.
Lake Formation permission model
As you learned in the previous section, there are challenges in managing S3 bucket policies and Glue Data Catalog resource policies. AWS Lake Formation is the service that is designed to overcome those challenges and simplify data platform management. Lake Formation provides a central layer for defining, classifying, tagging, and managing fine-grained access control to the AWS Glue Data Catalog and Amazon S3 locations. The permission model is designed in an RDBMS-like style so that you can grant permissions on databases, tables, or columns instead of S3 objects. Once you have granted access to tables with Lake Formation permissions, Lake Formation automatically manages both data access and metadata access under the hood, so you don’t need to manually...