Skip to content

Commit 8925aec

Browse files
authored
Updating images in readme
1 parent 982d534 commit 8925aec

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

README.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -114,7 +114,7 @@ The `GrantableDatabasePermissions`, `GrantableTableColumnPermissions`, and `Gran
114114

115115
To illustrate the the relationship between the fine-grained and coarse permissions, think of it as two doors. An IAM principal needs to have permission to walk through both doors to query the data lake. The DataLakeEnrollment construct handles granting both the fine and coarse permissions for you.
116116

117-
![image.png](https://api.quip-amazon.com/2/blob/HPG9AAwumxR/ACYxNvcfFhaRL15neEGWHA)
117+
![](https://docs.aws.amazon.com/lake-formation/latest/dg/images/permissions_doors.png)
118118

119119

120120

@@ -131,7 +131,7 @@ Visit the Lake Formation service page in the AWS console, and go to the “Setti
131131

132132
You need to **UNCHECK** the two boxes and hitSave
133133

134-
![image.png](https://api.quip-amazon.com/2/blob/HPG9AAwumxR/luIf4C1WcTNeDeixOEbqsg)
134+
![](https://devspacepaul.s3.us-west-2.amazonaws.com/DataCatalogSettings.png)
135135

136136
2) You need to revoke all of the Lake Formation permissions that have been granted to `IAM_ALLOWED_PRINCIPALS`. If you have used Glue in the past or the ChEMBL or OpenTarget workflows have already completed you can see a bunch of them in theData Permissionssection in the Lake Formation console. By unchecking the boxes before, we are now stopping the default behavior where Lake Formation adds a `IAM_ALLOWED_PRINCIPALS` grant to any Glue Tables/Resources created.
137137

@@ -147,4 +147,4 @@ The `local.datalake.RemoveIamAllowedPrincipals.py` python script will save you t
147147
python ./script/local.datalake.RemoveIamAllowedPrincipals.py
148148
```
149149
150-
DONT RUN THIS COMMAND IF YOU HAVE PEOPLE ALREADY RELYING ON THE AWS GLUE CATALOG (via Athena for example). This will effectively remove their access until you grant them user/role/group specific Lake Formation permissions.
150+
DONT RUN THIS COMMAND IF YOU HAVE PEOPLE ALREADY RELYING ON THE AWS GLUE CATALOG (via Athena for example). This will effectively remove their access until you grant them user/role/group specific Lake Formation permissions.

0 commit comments

Comments
 (0)