Permissions required for querying tables with cell-level filtering - Amazon Lake Formation
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Permissions required for querying tables with cell-level filtering

The following Amazon Identity and Access Management (IAM) permissions are required to run queries against tables with cell-level filtering.

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "lakeformation:StartQueryPlanning",
                "lakeformation:GetQueryState",
                "lakeformation:GetWorkUnits",
                "lakeformation:GetWorkUnitResults"
            ],
            "Resource": "*"
        }
    ]
}

For more information about Lake Formation permissions, see Lake Formation personas and IAM permissions reference.