- 최신
- 최다 투표
- 가장 많은 댓글
Create set of IAM roles based on user persona's and grant access to those data elements from Lake Foramtion to grant safer access to sensitive datasets. In turn those users can use same IAM role to create QuickSight or other dashboards using Athena as a soruce.
map these roles to on-prem AD group in case they are using Single-Sign-on.
Currently, you need to define each filter via the console or the APIs , ad then assign the permissions to each Roles , as you mentioned.
An example implementation is describe in this blog post.
If your customers need access to the their full partition, you grant access only via that specific web-app, and there is no need for additional filters at rows or cell level, you may not need to go for row or cell filtering.
관련 콘텐츠
- AWS 공식업데이트됨 일 년 전
Please, note the question is if there is a different way to define the filters that is more dynamic.