Publishing a blueprint - Amazon Glue
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Publishing a blueprint

After you develop a blueprint, you must upload it to Amazon S3. You must have write permissions on the Amazon S3 bucket that you use to publish the blueprint. You must also make sure that the Amazon Glue administrator, who will register the blueprint, has read access to the Amazon S3 bucket. For the suggested Amazon Identity and Access Management (IAM) permissions policies for personas and roles for Amazon Glue blueprints, see Permissions for personas and roles for Amazon Glue blueprints.

To publish a blueprint

  1. Create the necessary scripts, resources, and blueprint configuration file.

  2. Add all files to a ZIP archive and upload the ZIP file to Amazon S3. Use an S3 bucket that is in the same Region as the Region in which users will register and run the blueprint.

    You can create a ZIP file from the command line using the following command.

    zip -r folder.zip folder

  3. Add a bucket policy that grants read permissions to the Amazon desired account. The following is a sample policy.

    {
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Principal": {
                "AWS": "arn:aws:iam::111122223333:root"
            },
            "Action": "s3:GetObject",
            "Resource": "arn:aws:s3:::my-blueprints/*"
        }
    ]
}

  4. Grant the IAM s3:GetObject permission on the Amazon S3 bucket to the Amazon Glue administrator or to whoever will be registering blueprints. For a sample policy to grant to administrators, see Amazon Glue administrator permissions for blueprints.

After you have completed local testing of your blueprint, you may also want to test a blueprint on Amazon Glue. To test a blueprint on Amazon Glue, it must be registered. You can limit who sees the registered blueprint using IAM authorization, or by using separate testing accounts.

See also: