AWS Lake Formation Extends Table Permissions to Control Direct S3 Data File Access

Lake Formation now grants read/write access to underlying Amazon S3 data files through table permissions, simplifying data access management across SQL and file operations.

By Adrian Cole · Editorial pseudonym · 2026-06-11 · 1 min read

AI-ASSISTED REPORTING · RETROSPECTIVE ARCHIVE

Retrospective edition: 2026-06-11. Source published: 2026-06-11. Added to this archive: 2026-11-03. This briefing was prepared later from the linked announcement; it was not published on this website on the historical edition date.

By linking Glue Data Catalog table permissions to S3 data, Lake Formation issues temporary scoped credentials that respect SELECT (read) and SUPER (read/write) permissions. This unifies control for SQL queries and direct file operations, including Spark jobs for training, feature engineering, or debugging.

The feature integrates with Amazon EMR 7.13+ and offers open-source plugin support for Apache Spark and Trino, with all access logged to AWS CloudTrail for auditability. This enhances security and governance for data lakes and analytics workflows without additional charges.

Source & further reading

AWS Lake Formation extends table permissions to access underlying data in Amazon S3 ↗

Source published 2026-06-11. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.