Posted On: Jul 21, 2023

AWS Lake Formation now supports the ability to delegate the creation, management and granting of permissions of Lake Formation Tags (LF-Tags) to non-Lake Formation administrators. With this launch, Lake Formation administrators can give permissions to data stewards and other users to manage LF-Tags.

Previously, only users with Lake Formation administrator privileges could create, manage and grant permissions using LF-Tags. Now, these tasks can be delegated so users can autonomously create, tag and grant permissions on the Glue Data Catalog resources they own without the need for administrator privileges. This will help customers employ decentralized data ownership, like data meshes, using LF-Tags while striving to uphold least privilege.

This feature is available in all AWS Regions where AWS Lake Formation is available except the AWS GovCloud and China Regions. To get started with this feature, refer to documentation.