liveBook · Manning

Identity and access management

As explained in Architecting an Apache Iceberg Lakehouse

Identity and access management is the discipline and technology for authenticating identities and controlling their access to resources.

Identity and access management (IAM) authenticates identities and controls which users, roles, groups, or service identities can perform actions on specific resources. In data platforms, it protects both object storage and catalog metadata. section 5.2.2 section 7.2.3

IAM supports several architecture and governance requirements:

  • Grant fine-grained read, write, query, management, or metadata-alteration permissions to appropriate identities. section 5.2.2 section 7.2.3
  • Integrate with enterprise systems such as Amazon IAM, LDAP, OAuth, single sign-on, or custom token services. section 7.2.3
  • Support auditing, encrypted metadata access, regulatory controls, and lifecycle policies for security and compliance. section 5.2.2 section 7.2.3

How Architecting an Apache Iceberg Lakehouse covers it

How deep it goes
Explains permission targets, identity integrations, encryption, auditing, and compliance controls without detailing policy syntax or implementation commands.
Examples
Uses object-store read and write permissions, catalog table access, IAM or LDAP integration, and administrative audit trails.
What you can do after
Operate/configure fine-grained access controls that align storage and catalog permissions with enterprise security and compliance requirements.
How it connects
Connects object storage, data catalogs, Apache Iceberg, encryption, auditing, metadata lifecycle, and regulatory compliance.

Also explained in

Compare how 4 books explain identity and access management →

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Architecting an Apache Iceberg Lakehouse. The section links point to the parts of the book it draws on.