It looks to me like policies to control access that I assign to tables in DynamoDB are not reflected in Athena. If I have a table with attributes a, b, and c and my DynamoDB policy allows access to only attributes a and b, I can access all 3 by creating an Athena connector to the database. It looks like the connector's lambda function is accessing DynamoDB with it's own set of permissions that ignore the DynamoDB policies. Has anyone seen this? What am I doing wrong?
Thanks,
Jerry
Top comments (0)