search

aws-samples / aws-analytics-reference-architecture

https://aws.amazon.com/blogs/opensource/adding-cdk-constructs-to-the-aws-analytics-reference-architecture/
Other
158 stars 46 forks source link

LfS3Location construct not compatible with cross account bucket #361

Closed vgkowski closed 2 years ago

vgkowski commented 2 years ago

The LfS3Location requires a Bucket object and is using grantReadWrite to authorize the LakeFormation role to access data. This requires the bucket to be managed in the same CDK stack and so does not work in cross account setup.

We need to refactor the interface to an S3Location and an IKey (the KMS key used for the bucket encryption) and then create IAM permissions manually (not using the grantReadWrite)

flochaz commented 2 years ago

Custom resource ?