Policy: AWSLakeFormationDataAdmin ARN: arn:aws:iam::aws:policy/AWSLakeFormationDataAdmin Allowed Actions Actions Services cloudtrail:DescribeTrails cloudtrail cloudtrail:LookupEvents cloudtrail glue:BatchGetWorkflows glue glue:CreateCatalog glue glue:CreateDatabase glue glue:CreateTable glue glue:DeleteCatalog glue glue:DeleteDatabase glue glue:DeleteTable glue glue:DeleteWorkflow glue glue:GetCatalog glue glue:GetCatalogs glue glue:GetConnections glue glue:GetDatabase glue glue:GetDatabases glue glue:GetPartitions glue glue:GetTable glue glue:GetTableVersions glue glue:GetTables glue glue:GetWorkflow glue glue:GetWorkflowRuns glue glue:ListWorkflows glue glue:SearchTables glue glue:StartWorkflowRun glue glue:UpdateCatalog glue glue:UpdateDatabase glue glue:UpdateTable glue iam:GetRole iam iam:GetRolePolicy iam iam:ListRoles iam iam:ListUsers iam lakeformation:* lakeformation lakeformation:PutDataLakeSettings lakeformation s3:GetBucketAcl s3 s3:GetBucketLocation s3 s3:ListAllMyBuckets s3 s3:ListBucket s3