How do I share PII data asset in AWS DataZone

Question

Hello,
I would like to know how I can possibly share PII (sensitive data) using DataZone in a data mesh setup. If this is possible, would this be managed manually using LakeFormation from the producer's account or DataZone has already built in features to handle this ? 
Note:
My data source is via glue catalog and redshift from the producer's account

Answer

Hi,
   Amazon DataZone supports both AWS Glue and Amazon Redshift assets as managed ones. This means that Amazon DataZone will manage the cross-account data sharing configurations. Please, watch these demonstrations as references: 
* https://www.youtube.com/watch?v=JiaIL7ftMH0&list=PLhr1KZpdzuketYaoX3WAz5lIOCTkI3wXJ&index=9 
* https://www.youtube.com/watch?v=vYQiXQ-0sig&list=PLhr1KZpdzuketYaoX3WAz5lIOCTkI3wXJ&index=8
In addition to it, follow the documentation references for AWS Glue and Amazon Redshift managed assets in Amazon DataZone:
* https://docs.aws.amazon.com/datazone/latest/userguide/create-glue-data-source.html
* https://docs.aws.amazon.com/datazone/latest/userguide/create-redshift-data-source.html
And follow the documentation reference for working with associated AWS Accounts in Amazon DataZone domain for enabling cross-account data sharing:
* https://docs.aws.amazon.com/datazone/latest/userguide/working-with-associated-accounts.html
Following the references, you will be able to 1/ Setup Amazon DataZone domain 2/ Associate Producers and Consumers AWS Accounts 3/ Create Projects associated with Producers and Consumers accounts for both DataLake (AWS Glue) and DataWarehouse (Amazon Redshift) blueprints 4/ Provide ownership for Producers and Consumers to inventory, curate, publish and grant/revoke access & subscribe to assets directly in Amazon DataZone domain

How do I share PII data asset in AWS DataZone

相關內容