This article demonstrates implementing tag-based access control (TBAC) for data lakes and Amazon Redshift data sharing using AWS Lake Formation, enabling centralized permission management across distributed data assets.

• Lake Formation now integrates with Redshift data sharing for unified governance and fine-grained access control
• LF-Tags enable hierarchical tagging: databases inherit tags to tables, tables to columns
• Tag-based access policies simplify scaling permissions across multiple data resources
• Solution uses two personas: marketing analysts (non-PII access) and power users (PII access)
• Producer creates Redshift datashare, authorizes Lake Formation, registers in catalog
• Consumer creates external database from Glue catalog ARN for querying shared data
• Column-level access control restricts sensitive PII data to authorized users only
• Centralized permission management reduces operational complexity and improves security posture

This integration enables organizations to manage data lake and Redshift permissions centrally, supporting fine-grained column-level access control across business units while maintaining governance and compliance.