Cross-account data sharing using the named resource method - Amazon Lake Formation
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Cross-account data sharing using the named resource method

You can grant permissions to directly to principals in the another Amazon account, or to external Amazon Web Services accounts or Amazon Organizations. Granting Lake Formation permissions to Organizations or organizational units is equivalent to granting the permission to every Amazon Web Services account in that organization or organizational unit.

When you grant permissions to external accounts or organizations, you must include the Grantable permissions option. Only the data lake administrator in the external account can access the shared resources until the administrator grants permissions on the shared resources to other principals in the external account.

Note

Grantable permissions option is not supported when granting permissions directly to IAM principals from external accounts.

Follow instructions in Granting database permissions using the named resource method to grant cross-account permissions using the named resource method.

The following video demonstrates how to share data with an Amazon organization using Lake Formation.