Identity and access management (IAM) authenticates identities and controls which users, roles, groups, or service identities can perform actions on specific resources. In data platforms, it protects both object storage and catalog metadata. section 5.2.2 section 7.2.3
IAM supports several architecture and governance requirements:
- Grant fine-grained read, write, query, management, or metadata-alteration permissions to appropriate identities. section 5.2.2 section 7.2.3
- Integrate with enterprise systems such as Amazon IAM, LDAP, OAuth, single sign-on, or custom token services. section 7.2.3
- Support auditing, encrypted metadata access, regulatory controls, and lifecycle policies for security and compliance. section 5.2.2 section 7.2.3



