Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

AWS Lake Formation: Insufficient Lake Formation permission(s) on s3://abc/

I'm trying to setup a datalake from AWS Lake Formation Console.

I'm following the below resource to do the same: https://aws.amazon.com/blogs/big-data/integrating-aws-lake-formation-with-amazon-rds-for-sql-server/

But in second step while creating db, after entering db name and selecting s3 location, I'm getting

Insufficient Lake Formation permission(s) on s3:

I checked my permissions, I have admin role mapped to my account which allows all (*)

Can anyone help what's the actual issue!

like image 350
Jake Avatar asked Sep 15 '20 07:09

Jake


People also ask

What is Lake Formation permissions?

These permissions enable principals to create, read, update, and delete metadata databases and tables in the Data Catalog.

How do I check permissions on my S3 bucket?

Sign in to the AWS Management Console using the account that has the S3 bucket. Open the Amazon S3 console at https://console.aws.amazon.com/s3/ . Select the bucket that you want AWS Config to use to deliver configuration items, and then choose Properties. Choose Permissions.

What is AWS Lake Formation?

AWS Lake Formation is a service that makes it easy to set up a secure data lake in days. A data lake is a centralized, curated, and secured repository that stores all your data, both in its original form and prepared for analysis.


2 Answers

As error states "Insufficient Lake Formation permission(s) on s3"

This implies you have to give your role/user the permission to access s3 bucket. There for first you have to go to "Lake Formation" => Under "Permissions" tab => Select "Data locations" and then register your S3 location.

After this step you can go and create your DB.

like image 110
Mudit Singh Avatar answered Oct 13 '22 12:10

Mudit Singh


If you have declared some resource(IAM role / User) as lake formation administrator, you won't be able to create a Glue database from the lake formation console, Even though you have AWS account administrator access. It will work if you try creating using lake formation admin resource permissions.

like image 27
santosh peddada Avatar answered Oct 13 '22 13:10

santosh peddada