Snoflake & S3 permission update in docs (#8296)

openmetadata-docs/content/connectors/database/datalake/airflow.md

@@ -21,6 +21,29 @@ To deploy OpenMetadata, check the <a href="/deployment">Deployment</a> guides.
 To run the Ingestion via the UI you'll need to use the OpenMetadata Ingestion Container, which comes shipped with
 custom Airflow plugins to handle the workflow deployment.
 
+** S3 Permissions **
+
+<p> To execute metadata extraction AWS account should have enough access to fetch required data. The <strong>Bucket Policy</strong> in AWS requires at least these permissions: </p>
+
+```json
+{
+    "Version": "2012-10-17",
+    "Statement": [
+        {
+            "Effect": "Allow",
+            "Action": [
+                "s3:GetObject",
+                "s3:ListBucket"
+            ],
+            "Resource": [
+                "arn:aws:s3:::<my bucket>",
+                "arn:aws:s3:::<my bucket>/*"
+            ]
+        }
+    ]
+}
+```
+
 ### Python Requirements
 
 To run the Datalake ingestion, you will need to install:

openmetadata-docs/content/connectors/database/datalake/cli.md

@@ -21,6 +21,29 @@ To deploy OpenMetadata, check the <a href="/deployment">Deployment</a> guides.
 To run the Ingestion via the UI you'll need to use the OpenMetadata Ingestion Container, which comes shipped with
 custom Airflow plugins to handle the workflow deployment.
 
+** S3 Permissions **
+
+<p> To execute metadata extraction AWS account should have enough access to fetch required data. The <strong>Bucket Policy</strong> in AWS requires at least these permissions: </p>
+
+```json
+{
+    "Version": "2012-10-17",
+    "Statement": [
+        {
+            "Effect": "Allow",
+            "Action": [
+                "s3:GetObject",
+                "s3:ListBucket"
+            ],
+            "Resource": [
+                "arn:aws:s3:::<my bucket>",
+                "arn:aws:s3:::<my bucket>/*"
+            ]
+        }
+    ]
+}
+```
+
 ### Python Requirements
 
 To run the Datalake ingestion, you will need to install:

openmetadata-docs/content/connectors/database/datalake/index.md

@@ -40,6 +40,29 @@ To deploy OpenMetadata, check the <a href="/deployment">Deployment</a> guides.
 To run the Ingestion via the UI you'll need to use the OpenMetadata Ingestion Container, which comes shipped with
 custom Airflow plugins to handle the workflow deployment.
 
+** S3 Permissions **
+
+<p> To execute metadata extraction AWS account should have enough access to fetch required data. The <strong>Bucket Policy</strong> in AWS requires at least these permissions: </p>
+
+```json
+{
+    "Version": "2012-10-17",
+    "Statement": [
+        {
+            "Effect": "Allow",
+            "Action": [
+                "s3:GetObject",
+                "s3:ListBucket"
+            ],
+            "Resource": [
+                "arn:aws:s3:::<my bucket>",
+                "arn:aws:s3:::<my bucket>/*"
+            ]
+        }
+    ]
+}
+```
+
 ## Metadata Ingestion
 
 ### 1. Visit the Services Page

openmetadata-docs/content/connectors/database/snowflake/airflow.md

@@ -39,6 +39,7 @@ pip3 install "openmetadata-ingestion[snowflake-usage]"
 
 <Note>
 
+- To ingest basic metadata snowflake user must have at least `USAGE` privileges on required schemas.
 - While running the usage workflow, Openmetadata fetches the query logs by querying `snowflake.account_usage.query_history` table.
   For this the snowflake user should be granted the `ACCOUNTADMIN` role (or a role granted IMPORTED PRIVILEGES on the database).
 - If ingesting tags, the user should also have permissions to query `snowflake.account_usage.tag_references`.

openmetadata-docs/content/connectors/database/snowflake/cli.md

@@ -39,6 +39,7 @@ pip3 install "openmetadata-ingestion[snowflake-usage]"
 
 <Note>
 
+- To ingest basic metadata snowflake user must have at least `USAGE` privileges on required schemas.
 - While running the usage workflow, Openmetadata fetches the query logs by querying `snowflake.account_usage.query_history` table.
   For this the snowflake user should be granted the `ACCOUNTADMIN` role (or a role granted IMPORTED PRIVILEGES on the database).
 - If ingesting tags, the user should also have permissions to query `snowflake.account_usage.tag_references`.

openmetadata-docs/content/connectors/database/snowflake/index.md

@@ -45,6 +45,7 @@ custom Airflow plugins to handle the workflow deployment.
 
 <Note>
 
+- To ingest basic metadata snowflake user must have at least `USAGE` privileges on required schemas.
 - While running the usage workflow, Openmetadata fetches the query logs by querying `snowflake.account_usage.query_history` table.
   For this the snowflake user should be granted the `ACCOUNTADMIN` role (or a role granted IMPORTED PRIVILEGES on the database).
 - If ingesting tags, the user should also have permissions to query `snowflake.account_usage.tag_references`.