Amazon DataZone launches domain units and authorization policies
Today, Amazon DataZone announced a set of new data governance capabilities called domain units and authorization policies that enable customers to create business unit/team level organization and manage policies per their business needs. With the addition of domain units, users can organize, create, search, and find data assets and projects associated with business units or teams. With authorization policies, those domain unit users can set access policies for creating projects, glossaries, and using compute resources within Amazon DataZone.
As an Amazon DataZone administrator, you can now create domain units (e.g Sales, Marketing) under the top-level domain and assign domain unit owners to further manage their data team's structure. Amazon DataZone users can login to the portal to browse and search the catalog by domain units, and subscribe to data produced by specific business units. Additionally, authorization policies can be configured for a domain unit permitting actions such as who can create projects, metadata forms and glossaries within their domain units. Authorized portal users can then login to the Amazon DataZone portal, and create entities such as projects and create metadata forms using the authorized projects.
Amazon DataZone domain units and authorization policies is available in all AWS Regions where Amazon DataZone is available.
To learn more, visit Amazon DataZone, read the launch blog, and get started with domain unit documentation.