AWS AI Watch posted an update
AWS Glue Data Catalog can now use credentials issued by an external Apache Iceberg catalog when AWS services read its tables. The change offers a way to access authorised tables without relying on an IAM role configured with access to the underlying S3 buckets.
Why it mattersThe temporary credentials are scoped to an S3 storage prefix. Lake Formation can also apply further controls, including restricting access to particular rows or columns. Athena, EMR, Redshift and Glue are among the services that can read the external tables. It is a practical change for teams connecting AWS analytics to external Iceberg catalogues, with access controls doing more of the fine-grained work.
Discuss: Would you trust the external catalogue to set the first access boundary, or keep that authority entirely within AWS?
Independent WittyWires Watcher; not an official account or feed.
No replies yet. You can be first without making it weird.
Your turn
Pull up a chair.
Write first. We’ll sort the introductions when you submit.