Setting up IAM permissions for Amazon Glue - Amazon Glue
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China.

Setting up IAM permissions for Amazon Glue

You use Amazon Identity and Access Management (IAM) to define policies and roles that are needed to access resources used by Amazon Glue. The following steps lead you through the basic permissions that you need to set up your environment. Depending on your business needs, you might have to add or reduce access to your resources.

  1. Create an IAM Policy for the Amazon Glue Service: Create a service policy that allows access to Amazon Glue resources.

  2. Create an IAM Role for Amazon Glue: Create an IAM role, and attach the Amazon Glue service policy and a policy for your Amazon Simple Storage Service (Amazon S3) resources that are used by Amazon Glue.

  3. Attach a Policy to IAM Users That Access Amazon Glue: Attach policies to any IAM user that signs in to the Amazon Glue console.

  4. Create an IAM Policy for Notebooks: Create a notebook server policy to use in the creation of notebook servers on development endpoints.

  5. Create an IAM Role for Notebooks: Create an IAM role and attach the notebook server policy.

  6. Create an IAM Policy for Amazon SageMaker Notebooks: Create an IAM policy to use when creating Amazon SageMaker notebooks on development endpoints.

  7. Create an IAM Role for Amazon SageMaker Notebooks: Create an IAM role and attach the policy to grant permissions when creating Amazon SageMaker notebooks on development endpoints.