Segmentation of athena databases by groups (governance)

Question & Answer
, ,
1

Is there any way to segment athena databases (as datasources) by group?
For example:

In Athena, there are databases: a, b, c, d, e
And we have groups 1, 2 and 3, 4.

  • For group 1, make databases a and b available and hide c, d, e
  • For group 2, make databases d and e available and hide a, b, c
  • For group 3, make databases c and e available and hide a, b, d
  • For group 4, male all databaeses available

For this, guarantee that group 1 does not have access to databases c, d, e even someone of one group that have access share with someone of group 1
and so on…

In AWS console we make this governance by group policies.

2

Does this conversation help?

3

Unfortunately doesn’t :confused:

4

I’m assuming it has to do something with the IAM permissions of Athena. So you’ll need to look into updating permissions on Athena.

If you can’t do that then you can look into row level security but it seems as though you want to take it a step above a limit access to a database.