diff --git a/openmetadata-docs/content/v1.1.x/connectors/database/athena/index.md b/openmetadata-docs/content/v1.1.x/connectors/database/athena/index.md index 8197a4e2894..0cdbcbae2c0 100644 --- a/openmetadata-docs/content/v1.1.x/connectors/database/athena/index.md +++ b/openmetadata-docs/content/v1.1.x/connectors/database/athena/index.md @@ -57,7 +57,7 @@ permissions policy includes all the actions listed in [AWS managed policy: AWSQu This policy groups the following permissions: - `athena` – Allows the principal to run queries on Athena resources. -- `glue` – Allows principals access to AWS Glue databases, tables, and partitions. This is required so that the principal can use the AWS Glue Data Catalog with Athena. +- `glue` – Allows principals access to AWS Glue databases, tables, and partitions. This is required so that the principal can use the AWS Glue Data Catalog with Athena. Resources of each table and database needs to be added as resource for each database user wants to ingest. - `lakeformation` – Allows principals to request temporary credentials to access data in a data lake location that is registered with Lake Formation. And is defined as: @@ -79,8 +79,8 @@ And is defined as: ], "Effect": "Allow", "Resource": [ - "arn:aws:athena:us-east-2::workgroup/your_workgroup", - "arn:aws:athena:us-east-2::datacatalog/your_datacatalog" + "arn:aws:athena:<>:<>:workgroup/<>", + "arn:aws:athena:<>:<>:datacatalog/<>" ] }, { @@ -91,11 +91,9 @@ And is defined as: ], "Effect": "Allow", "Resource": [ - "arn:aws:glue:us-east-2::table/default/*", - "arn:aws:glue:us-east-2::table/mydatabase/*", - "arn:aws:glue:us-east-2::database/default", - "arn:aws:glue:us-east-2::database/mydatabase", - "arn:aws:glue:us-east-2::catalog" + "arn:aws:glue:::table/<>/*", + "arn:aws:glue:::database/<>", + "arn:aws:glue:::catalog" ] }, { @@ -107,7 +105,7 @@ And is defined as: ], "Effect": "Allow", "Resource": [ - "arn:aws:s3:::athena-bucket/*" + "arn:aws:s3:::<>/*" ] } ] diff --git a/openmetadata-docs/content/v1.1.x/connectors/database/athena/yaml.md b/openmetadata-docs/content/v1.1.x/connectors/database/athena/yaml.md index 676d07aab0b..a726f4e857e 100644 --- a/openmetadata-docs/content/v1.1.x/connectors/database/athena/yaml.md +++ b/openmetadata-docs/content/v1.1.x/connectors/database/athena/yaml.md @@ -61,7 +61,7 @@ permissions policy includes all of the actions listed in [AWS managed policy: AW This policy groups the following permissions: - `athena` – Allows the principal to run queries on Athena resources. -- `glue` – Allows principals access to AWS Glue databases, tables, and partitions. This is required so that the principal can use the AWS Glue Data Catalog with Athena. +- `glue` – Allows principals access to AWS Glue databases, tables, and partitions. This is required so that the principal can use the AWS Glue Data Catalog with Athena. Resources of each table and database needs to be added as resource for each database user wants to ingest. - `lakeformation` – Allows principals to request temporary credentials to access data in a data lake location that is registered with Lake Formation. And is defined as: @@ -83,8 +83,8 @@ And is defined as: ], "Effect": "Allow", "Resource": [ - "arn:aws:athena:us-east-2::workgroup/your_workgroup", - "arn:aws:athena:us-east-2::datacatalog/your_datacatalog" + "arn:aws:athena:<>:<>:workgroup/<>", + "arn:aws:athena:<>:<>:datacatalog/<>" ] }, { @@ -95,11 +95,9 @@ And is defined as: ], "Effect": "Allow", "Resource": [ - "arn:aws:glue:us-east-2::table/default/*", - "arn:aws:glue:us-east-2::table/mydatabase/*", - "arn:aws:glue:us-east-2::database/default", - "arn:aws:glue:us-east-2::database/mydatabase", - "arn:aws:glue:us-east-2::catalog" + "arn:aws:glue:::table/<>/*", + "arn:aws:glue:::database/<>", + "arn:aws:glue:::catalog" ] }, { @@ -111,7 +109,7 @@ And is defined as: ], "Effect": "Allow", "Resource": [ - "arn:aws:s3:::athena-bucket/*" + "arn:aws:s3:::<>/*" ] } ] diff --git a/openmetadata-docs/content/v1.2.x/connectors/database/athena/index.md b/openmetadata-docs/content/v1.2.x/connectors/database/athena/index.md index 145dbca72bc..361ad0f7566 100644 --- a/openmetadata-docs/content/v1.2.x/connectors/database/athena/index.md +++ b/openmetadata-docs/content/v1.2.x/connectors/database/athena/index.md @@ -57,7 +57,7 @@ permissions policy includes all of the actions listed in [AWS managed policy: AW This policy groups the following permissions: - `athena` – Allows the principal to run queries on Athena resources. -- `glue` – Allows principals access to AWS Glue databases, tables, and partitions. This is required so that the principal can use the AWS Glue Data Catalog with Athena. +- `glue` – Allows principals access to AWS Glue databases, tables, and partitions. This is required so that the principal can use the AWS Glue Data Catalog with Athena. Resources of each table and database needs to be added as resource for each database user wants to ingest. - `lakeformation` – Allows principals to request temporary credentials to access data in a data lake location that is registered with Lake Formation. And is defined as: @@ -79,8 +79,8 @@ And is defined as: ], "Effect": "Allow", "Resource": [ - "arn:aws:athena:us-east-2::workgroup/your_workgroup", - "arn:aws:athena:us-east-2::datacatalog/your_datacatalog" + "arn:aws:athena:<>:<>:workgroup/<>", + "arn:aws:athena:<>:<>:datacatalog/<>" ] }, { @@ -91,11 +91,9 @@ And is defined as: ], "Effect": "Allow", "Resource": [ - "arn:aws:glue:us-east-2::table/default/*", - "arn:aws:glue:us-east-2::table/mydatabase/*", - "arn:aws:glue:us-east-2::database/default", - "arn:aws:glue:us-east-2::database/mydatabase", - "arn:aws:glue:us-east-2::catalog" + "arn:aws:glue:::table/<>/*", + "arn:aws:glue:::database/<>", + "arn:aws:glue:::catalog" ] }, { @@ -107,7 +105,7 @@ And is defined as: ], "Effect": "Allow", "Resource": [ - "arn:aws:s3:::athena-bucket/*" + "arn:aws:s3:::<>/*" ] } ] diff --git a/openmetadata-docs/content/v1.2.x/connectors/database/athena/yaml.md b/openmetadata-docs/content/v1.2.x/connectors/database/athena/yaml.md index 2242e4bfd2f..63199aba66d 100644 --- a/openmetadata-docs/content/v1.2.x/connectors/database/athena/yaml.md +++ b/openmetadata-docs/content/v1.2.x/connectors/database/athena/yaml.md @@ -61,7 +61,7 @@ permissions policy includes all of the actions listed in [AWS managed policy: AW This policy groups the following permissions: - `athena` – Allows the principal to run queries on Athena resources. -- `glue` – Allows principals access to AWS Glue databases, tables, and partitions. This is required so that the principal can use the AWS Glue Data Catalog with Athena. +- `glue` – Allows principals access to AWS Glue databases, tables, and partitions. This is required so that the principal can use the AWS Glue Data Catalog with Athena. Resources of each table and database needs to be added as resource for each database user wants to ingest. - `lakeformation` – Allows principals to request temporary credentials to access data in a data lake location that is registered with Lake Formation. And is defined as: @@ -83,8 +83,8 @@ And is defined as: ], "Effect": "Allow", "Resource": [ - "arn:aws:athena:us-east-2::workgroup/your_workgroup", - "arn:aws:athena:us-east-2::datacatalog/your_datacatalog" + "arn:aws:athena:<>:<>:workgroup/<>", + "arn:aws:athena:<>:<>:datacatalog/<>" ] }, { @@ -95,11 +95,9 @@ And is defined as: ], "Effect": "Allow", "Resource": [ - "arn:aws:glue:us-east-2::table/default/*", - "arn:aws:glue:us-east-2::table/mydatabase/*", - "arn:aws:glue:us-east-2::database/default", - "arn:aws:glue:us-east-2::database/mydatabase", - "arn:aws:glue:us-east-2::catalog" + "arn:aws:glue:::table/<>/*", + "arn:aws:glue:::database/<>", + "arn:aws:glue:::catalog" ] }, { @@ -111,7 +109,7 @@ And is defined as: ], "Effect": "Allow", "Resource": [ - "arn:aws:s3:::athena-bucket/*" + "arn:aws:s3:::<>/*" ] } ]