Updating a federated catalog
You can update a Amazon Redshift federated catalog in the Data Catalog using the Lake Formation console, the Amazon CLI or the UpdateCatalog API operation.
- Amazon Web Services Management Console
-
Follow these steps to update your federated catalog using Lake Formation console.
Sign in to the Amazon Web Services Management Console, and open the Lake Formation console at https://console.amazonaws.cn/lakeformation/
. In the left navigation pane, choose Catalogs under Data Catalog.
On the Catalogs page, choose the Amazon Redshift federated catalog you want to update.
Under Actions, choose Edit.
On the Set Catalog details screen, under the Access from engines section, choose Access this catalog from Iceberg compatible engines. Checking this option will enable data lake access for Apache Iceberg compatible query engines.
-
Next, create a new IAM role or choose an existing IAM role that has the policy that grants permissions to perform data transfer to and from the Amazon S3 bucket.
For more information on permissions, see Prerequisites for managing Amazon Redshift namespaces in the Amazon Glue Data Catalog.
-
By default, your data in the Amazon Redshift cluster is encrypted using an Amazon managed key. If you choose to encrypt data using a customer managed key, either create a KMS key or choose an existing key that has the permissions defined in the Prerequisites for managing Amazon Redshift namespaces in the Amazon Glue Data Catalog section.
-
Choose Save.
Upon successful completion, the Catalog details page shows the managed workgroup name with the status as "Success".
- Amazon CLI
-
The following is an example of the
update-catalog
CLI input with the data lake access disabled by setting theDataLakeAacess
parameter value asfalse
.aws glue update-catalog --cli-input-json \ '{ "Name": "nscatalog", "CatalogInput": { "Description": "Redshift published catalog", "CreateDatabaseDefaultPermissions" : [], "CreateTableDefaultPermissions": [], "FederatedCatalog": { "Identifier": "arn:aws:redshift:us-east-1:123456789012:datashare:11524d7f-f56d-45fe-83f7-d7bb0a4d6d71/ds_internal_namespace", "ConnectionName": "aws:redshift" }, "CatalogProperties": { "DataLakeAccessProperties" : { "DataLakeAccess" : false } } } }'