Working with large image files in Lake Formation

Question

I need to use Lake Formation LF-TAG permissions to control access to a group of large [image] files stored in S3. 
I created a governed table in Lake Formation to keep all image metadata, including S3 path to images itself.
I configured LF-TAGs tags to provide a restricted user with access to this metadata table and its content.

However, I can't figure out how to configure LF-TAG permissions to control access to image objects (files) located in S3 . It is possible to use LF-TAGs to control access to non-tabular data at all>

Accepted Answer

So I would answer this by you are trying to leverage LF-TBAC to control access to files in S3. This is where I would look into the specifics on how to provide granular access to objects/files/prefixes within S3 specifically.

Here is a specific workshop that you could potentially use to find a method to do it. https://catalog.workshops.aws/applying-abac/en-US/module1/01architecture if it works out, I think that would be a great blog item to talk about!

Please let me know if this answer provided you some benefit by marking it as accepted, and do come back to see if you found a way to unite S3 ABAC to LF-TBAC.

Working with large image files in Lake Formation

相關內容