Unified data access governance in a data mesh

Publication date: February 13, 2023 (Diagram history)

PrivaceraCloud provides federated computation governance for consistent data access control, governed data sharing, and compliance across AWS services and external on-premises data sources.

Unified data access governance in a data mesh diagram

The following steps describe the architecture:

1. Data flows into AWS through batch processing, real-time data, or change data capture (CDC).

2. The producer domain manages data sources, storing raw data in Amazon S3 and processing it using Amazon EMR, AWS Glue, DynamoDB, and Amazon RDS.

3. AWS Glue and other services manage metadata, and AWS Glue catalogs data for discovery and governance.

4. The consumer domain uses processed data sets from multiple producer domains based on business needs. Consumers build a data mart using Amazon Redshift and Athena.

5. Consumers search and filter data sets recorded in the central data catalog by name, contents, sensitivity, or custom labels.

6. PrivaceraCloud delivers unified data access governance as a fully managed SaaS solution. Built on the attribute-based access control (ABAC) policy model of Apache Ranger, it applies governance to Amazon S3, AWS Glue, Amazon EMR, Amazon RDS, DynamoDB, Athena, and Amazon Redshift.

Further reading

For additional information, refer to the following resources:

• AWS Architecture Icons

• AWS Architecture Center

• AWS Well-Architected