AWS Big Data Blog
Category: Security, Identity, & Compliance
Enable federation to HAQM QuickSight with automatic provisioning of users between AWS IAM Identity Center and Microsoft Azure AD
Organizations are working towards centralizing their identity and access strategy across all their applications, including on-premises, third-party, and applications on AWS. Many organizations use identity providers (IdPs) based on OIDC or SAML-based protocols like Microsoft Azure Active Directory (Azure AD) and manage user authentication along with authorization centrally. This authorizes users to access HAQM QuickSight […]
Introducing runtime roles for HAQM EMR steps: Use IAM roles and AWS Lake Formation for access control with HAQM EMR
You can use the HAQM EMR Steps API to submit Apache Hive, Apache Spark, and others types of applications to an EMR cluster. You can invoke the Steps API using Apache Airflow, AWS Steps Functions, the AWS Command Line Interface (AWS CLI), all the AWS SDKs, and the AWS Management Console. Jobs submitted with the […]
Integrate AWS IAM Identity Center (successor to AWS Single Sign-On) with AWS Lake Formation fine-grained access controls
Data lakes are a centralized repository for storing structured and unstructured data at scale. Data lakes enable you to create dashboards, perform big data processing and real-time analytics, and create machine learning (ML) models on your data to drive business decisions. Many customers are choosing AWS Lake Formation as their data lake management solution. Lake […]
Store HAQM EMR in-transit data encryption certificates using AWS Secrets Manager
With HAQM EMR, you can use a security configuration to specify settings for encrypting data in transit. When in-transit encryption is configured, you can enable application-specific encryption features, for example: Hadoop HDFS NameNode or DataNode user interfaces use HTTPS Hadoop MapReduce encrypted shuffle uses Transport Layer Security (TLS) Presto nodes internal communication uses SSL/TLS (HAQM […]
Create cross-account, custom HAQM Managed Grafana dashboards for HAQM Redshift
HAQM Managed Grafana recently announced a new data source plugin for HAQM Redshift, enabling you to query, visualize, and alert on your HAQM Redshift data from HAQM Managed Grafana workspaces. With the new HAQM Redshift data source, you can now create dashboards and alerts in your HAQM Managed Grafana workspaces to analyze your structured and […]
Federated access to HAQM Redshift clusters in AWS China Regions with Active Directory Federation Services
Many customers already manage user identities through identity providers (IdPs) for single sign-on access. With an IdP such as Active Directory Federation Services (AD FS), you can set up federated access to HAQM Redshift clusters as a mechanism to control permissions for the database objects by business groups. This provides a seamless user experience, and centralizes the governance […]
Use the default IAM role in HAQM Redshift to simplify accessing other AWS services
HAQM Redshift is a fast, scalable, secure, and fully managed cloud data warehouse that makes it simple and cost-effective to analyze all your data using standard SQL. HAQM Redshift offers up to three times better price performance than any other cloud data warehouse, and can expand to petabyte scale. Today, tens of thousands of AWS […]
Apply CI/CD DevOps principles to HAQM Redshift development
CI/CD in the context of application development is a well-understood topic, and developers can choose from numerous patterns and tools to build their pipelines to handle the build, test, and deploy cycle when a new commit gets into version control. For stored procedures or even schema changes that are directly related to the application, this […]
Cybersecurity Awareness Month: Learn about the job zero of securing your data using HAQM Redshift
HAQM Redshift is a fast, petabyte-scale cloud data warehouse delivering the best price-performance. It allows you to run complex analytic queries against terabytes to petabytes of structured and semi-structured data, using sophisticated query optimization, columnar on high-performance storage, and massively parallel query execution. At AWS, we embrace the culture that security is job zero, by […]
Configure single sign-on authentication for HAQM Athena with Azure AD integrated to on-premises AD
HAQM Athena is an interactive query service that makes it easier to analyze data directly in HAQM Simple Storage Service (HAQM S3) using standard SQL. Cloud operation teams can use AWS Identity and Access Management (IAM) federation to centrally manage access to Athena. This simplifies administration by allowing a governing team to control user access […]