Configuring IAM permissions for AWS Glue

You use AWS Identity and Access Management (IAM) to define policies and roles that AWS Glue uses to access resources. The following steps lead you through various options for setting up the permissions for AWS Glue. Depending on your business needs, you might have to add or reduce access to your resources.

Note

To get started with basic IAM permissions for AWS Glue instead, see Setting up IAM permissions for AWS Glue.

1. Create an IAM policy for the AWS Glue service: Create a service policy that allows access to AWS Glue resources.

2. Create an IAM role for AWS Glue: Create an IAM role, and attach the AWS Glue service policy and a policy for your Amazon Simple Storage Service (Amazon S3) resources that are used by AWS Glue.

3. Attach a policy to users or groups that access AWS Glue: Attach policies to any users or groups that sign in to the AWS Glue console.

4. Create an IAM policy for notebooks: Create a notebook server policy to use in the creation of notebook servers on development endpoints.

5. Create an IAM role for notebooks: Create an IAM role and attach the notebook server policy.

6. Create an IAM policy for Amazon SageMaker notebooks: Create an IAM policy to use when creating Amazon SageMaker notebooks on development endpoints.

7. Create an IAM role for Amazon SageMaker notebooks: Create an IAM role and attach the policy to grant permissions when creating Amazon SageMaker notebooks on development endpoints.