managing-data-asset-access
Grants, requests, audits and removes access to data assets in an AWS data catalog (the Amazon SageMaker Catalog supported by Amazon DataZone) through catalog subscriptions over published listings. Covers requesting a subscription, approving or rejecting requests with a recorded decision, sharing a listing with a project, revoking one or many subscriptions, and confirming grant settlement. Triggers on: give another team access to a table, request access to a dataset, approve or reject an access request, share a listing with a project, who has access to this table, revoke access, bulk revoke, is the access actually gone, subscription grant status. Not for: IAM roles, policies or STS (use aws-iam), S3 bucket policies (use securing-s3-buckets), Clean Rooms permissions (use aws-cleanrooms), or writing catalog metadata, glossaries and forms, publishing listings, or retiring or deleting an asset that other teams are subscribed to and the order of operations that needs (use managing-data-catalog)
- Version
- 1
Pinned to revision 8e5b627c5d21, so it is the text this page describes rather than whatever the author pushed since.
Files
- skills/managing-data-asset-access/SKILL.md
- skills/managing-data-asset-access/references/access-model-detection.md
- skills/managing-data-asset-access/references/access-safety.md
- skills/managing-data-asset-access/references/approving-access.md
- skills/managing-data-asset-access/references/auditing-and-revoking.md
- skills/managing-data-asset-access/references/bulk-revocation.md
- skills/managing-data-asset-access/references/requesting-access.md
- skills/managing-data-asset-access/references/troubleshooting.md
Every link opens the file at its source, pinned to the revision this page describes.