Authentication and Authorization over Data

Who you are and what you may touch, at data granularity. IAM roles and role chaining for pipelines, IAM Identity Center for human access, Lake Formation permissions down to column and row, Redshift and Athena access models, and the resource policies that catch people out on cross-account reads.

Content current as of 2026-10.

Lessons

1. Identities for pipelines and people
2. Lake Formation: table, column, row
3. Access control in Redshift and Athena
4. Cross-account data access

Sources

• AWS Lake Formation developer guide — data filtering and cell-level security
• AWS Lake Formation developer guide — hybrid access mode
• Amazon Redshift database developer guide — row-level security
• Amazon Athena user guide — using workgroups to control query access and costs
• Amazon EMR management guide — runtime roles for Amazon EMR steps