|
1 | 1 | --- |
2 | 2 | title:Lake Formation |
| 3 | +plan:data-lakes |
3 | 4 | --- |
4 | 5 |
|
5 | | -{% include content/plan-grid.md name="data-lakes" %} |
6 | | - |
7 | 6 | Lake Formation is a fully managed service built on top of the AWS Glue Data Catalog that provides one central set of tools to build and manage a Data Lake. These tools help import, catalog, transform, and deduplicate data, as well as provide strategies to optimize data storage and security. To learn more about Lake Formation features, see[Amazon Web Services documentation](https://aws.amazon.com/lake-formation/features/){:target="_blank"}. |
8 | 7 |
|
9 | 8 | The security policies in Lake Formation use two layers of permissions: each resource is protected by Lake Formation permissions (which control access to Data Catalog resources and S3 locations) and IAM permissions (which control access to Lake Formation and AWS Glue API resources). When any user or role reads or writes to a resource, that action must pass a both a Lake Formation and an IAM resource check: for example, a user trying to create a new table in the Data Catalog may have Lake Formation access to the Data Catalog, but if they don't have the correct Glue API permissions, they will be unable to create the table. |
|