Athena query: Insufficient Lake Formation permission(s): Illegal permission combination

1

I have configured a data lake using Lake Formation and Glue to populate and upsert the database and tables. This upsert includes assigning LF Tags to each table and column (for LF Tag-based governance). I'm trying to query the table using Athena, with an administrator level user account, plus Lake formation permissions on LF Tags, datalake administrator, database creator, and permissions to the s3 data location resource. However, when I query a

select count(*) from table

on Athena, I'm thrown this error:

Insufficient Lake Formation permission(s): Illegal permission combination (Service: AWSGlue; Status Code: 400; Error Code: AccessDeniedException; Request ID: 6280c520-8891-4461-8a7e-2e6bbb5a2fec; Proxy: null)
This query ran against the "raw" database, unless qualified by the query. Please post the error message on our forum  or contact customer support  with Query Id: 2f3f0e09-0cda-4e07-a390-80689a66c022

I've tried adding all possible permissions to access the data, but still can't run a query using Athena. Can someone spot what I'm missing out?

Thanks!

Denis

질문됨 2년 전3831회 조회
1개 답변
0

Try unselecting IAM Access Control from Lake Formation Menu -> Settings or on database level (a checkbox) depending on your setup.

Considering your error it seems both types of permissions (IAM and Lakeformation) are used which is not allowed

Check also these resources: https://docs.aws.amazon.com/lake-formation/latest/dg/troubleshooting.html#troubleshooting-problem5 https://docs.aws.amazon.com/lake-formation/latest/dg/change-settings.html

답변함 2년 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인