The Teradata OTF engine integrates with AWS Glue and Lake Formation. This integration enables data governance for Teradata Vantage OTF and other OTF engines in AWS. It achieves this through access control management with fine-grained permissions on Glue databases and tables. These permissions are configurable at both the user and group levels. With Lake Formation configurations, one can validate and honor fine-grained data permissions (role-based access control or RBAC) for database and table operations such as CREATE TABLE, INSERT, SELECT, ALTER, DELETE and DROP. One can also ensure sensitive data is protected through column and row level security while providing authorized users with necessary data access. Temporary storage credentials from Lake Formation are used to access data stored in S3.
See AWS Lake Formation Setup with Teradata OTF for information on how to set up Lake Formation for Teradata Vantage.