Lake Formation
12 questionsTag-based access control, column and row security, cross-account sharing, and data governance.
Lake Formation vs IAM for Data Lake Security
Your team currently manages S3 data lake access using IAM policies and bucket policies. Your security lead wants to switch to Lake Formation. What are the advantages?
LF-Tags for Scalable Access Control
You have 200 tables across 15 databases and need to manage access for 30 teams. Creating individual table grants is unsustainable. How do you scale this?
Column-Level Security in Lake Formation
Your PII compliance requires that only the HR team can see salary and SSN columns, while other teams see all other columns. How do you implement this in Lake Formation?
Row-Level Security with Data Filters
Your multi-tenant data lake stores data for all regions in a single table. Each regional team should only see their own region's data. How do you enforce this without creating separate tables?
Cross-Account Data Sharing
Your organization has separate AWS accounts for production, analytics, and data science. The analytics account needs to query tables owned by the production account. How do you set this up with Lake Formation?
Registering S3 Locations with Lake Formation
You've set up Lake Formation permissions, but users can still access S3 data directly using their IAM roles, bypassing LF security. What's wrong?
Data Catalog Permissions Model
Explain the difference between data permissions and metadata permissions in Lake Formation. When would you grant each?
Lake Formation Governed Tables
Your data lake needs ACID transactions and consistent reads across multiple tables. How does Lake Formation help, and how does it compare to Iceberg/Hudi?
Hybrid LF + IAM Permission Model
You're migrating from IAM-only data lake security to Lake Formation. 200 pipelines depend on current IAM permissions. How do you migrate without breaking anything?
Auditing Data Access with Lake Formation
Your compliance team needs a report showing who accessed which tables and columns in the last 30 days. How do you generate this from Lake Formation?
Multi-Account Data Mesh with Lake Formation
Your organization is adopting a data mesh architecture with domain-owned data products across 20 AWS accounts. How would you use Lake Formation to enable discovery and governed access?
Troubleshooting Lake Formation Permission Denied
A user reports 'Access Denied' when querying a table in Athena, but you've granted them SELECT permission in Lake Formation. What's your debugging checklist?