Skip to content

AWS Services Configuration for Lake Formation Push Mode

Privacera's LakeFormation connector uses AWS services like AWS LakeFormation, AWS Glue, and AWS IAM to get the user identities and manage privileges in Lake Formation.. To configure the connector, you need AWS Policies which has the permissions to read the meta data from AWS Glue, AWS IAM Roles from AWS IAM and update permissions to update AWS Lake Formation. For detailed permissions, refer to the prerequisites.

  • IAM Role - The IAM role should have the necessary permissions to read the metadata from AWS Glue, read the IAM roles. Refer to the prerequisites for detailed permissions.
  • Access Key and Secret Key
  • AWS Account ID - This is the AWS account ID where the AWS Lake Formation is running. E.g. 123456789012
  • AWS Region - The AWS region where the AWS Lake Formation is running. E.g. us-west-2

In Privacera Manager, set the following properties in privacera/privacera-manager/config/custom-vars/connectors/lakeformation/push/vars.connector.lakeformation.push.yml

YAML
1
2
3
4
5
6
CONNECTOR_LAKEFORMATION_AWS_ACCOUNT_ID: ""
CONNECTOR_LAKEFORMATION_AWS_REGION: ""

# AWS SDK Version
# Enable AWS SDK v2 for improved performance and features
CONNECTOR_LAKEFORMATION_USE_SDKV2: "true"

AWS SDK Version

  • CONNECTOR_LAKEFORMATION_USE_SDKV2: Enables AWS SDK v2 for the Lake Formation connector. Set to "true" to use AWS SDK v2, which provides improved performance, better async support, and enhanced features. Defaults to "true".