Verifying How IAM and Lake Formation Behave for the Glue REST Catalog and S3 Tables

Original Japanese article: Glue REST CatalogとS3TablesのIAMとLake Formationの挙動を確かめる

Introduction

I'm Aki, an AWS Community Builder (@jitepengin).

In my previous article, I hit the Iceberg REST Catalog directly and confirmed the design differences between the Glue endpoint and the S3 Tables endpoint.

In that article I wrote that "accessing through the Glue endpoint requires a Lake Formation grant." This time, I'll deliberately vary the IAM policy and the Lake Formation grant to see exactly how the behavior of each endpoint changes.