Amazon Technologies, Inc.

Krishnaditya Kandregula

Vinay Singh

Sachet Saurabh

Mehul A Shah

Douglas Brian Terry

Pavel Sokolov

William Michael McCreedy

Mohammad Foyzur Rahman

Karsten Jancke

Purvaja Narayanaswamy

Vladimir Ponomarenko

Venkata Naga Raja Sri Harsha Kesapragada

Dmytro Lebedyev

Michael Sklar Chess

Kostiantyn Dymov

Sharda Kishin Khubchandani

Grayson Osburn Vigeant Clendenon

Frank Benkstein

Abhijit Uday Pujare

Ramy Nazier

A federated permission management service provides clients with customized access to a data set using customized authorization metadata. The federated permission management service may define and apply permissions that are defined at a data lake that provides access to many different data sets from many different sources, as well as those permissions that may be defined at the source of the data set, which may be provided when performing a data sharing request. By allowing for permissions to be specified at the data lake in addition to permissions specified at a source of a data set, the permission management service can provide a fine-grained access control to specific objects of the data set, such as specific columns, specific rows, or specific cells of a database to be shared, even for those data sets in the data lake having different sources.

Data sharing with federated access permissions

Respective delegation records indicating that a first access controller and a second access controller have been authorized to grant access to a respective set of cells of a table of a storage management service are stored. In response to receiving an access request of a data accessor, permission records indicating that the access controllers have granted permissions to the data accessor to respective subsets of the table's cells are identified. A collection of cells of the table to which the data accessor has been granted access permission is identified using the permission records, and a response to the access request is generated using the collection.

Delegated fine-grained access control for data lakes

Growing community of inventors

Redmond, WA, United States of America

Krishnaditya Kandregula