AWS Glue access control policy examples

This section contains examples of both identity-based (IAM) access control policies and AWS Glue resource policies.

Contents

• Identity-based policy examples for AWS Glue
  • Policy best practices
  • Resource-level permissions only apply to specific AWS Glue objects
  • Using the AWS Glue console
  • Allow users to view their own permissions
  • Grant read-only permission to a table
  • Filter tables by GetTables permission
  • Grant full access to a table and all partitions
  • Control access by name prefix and explicit denial
  • Grant access using tags
  • Deny access using tags
  • Use tags with list and batch API operations
  • Control settings using condition keys or context keys
    • Control policies that control settings using condition keys
    • Control policies that control settings using context keys
  • Deny an identity the ability to create data preview sessions
• Resource-based policy examples for AWS Glue
  • Considerations for using resource-based policies with AWS Glue
  • Use a resource policy to control access in the same account