
AWS Lake Formation introduces a Read-Only Administrator role that allows auditing of data catalog metadata and permissions without the ability to make modifications.


<div><p>This article announces the launch of a Read-Only Administrator role for AWS Lake Formation, enabling auditing and validation without modification permissions.</p><ul><li>Read-Only Administrators can access Glue Data Catalog metadata and Lake Formation permissions without making changes</li><li>Allows searching metadata and validating permissions without requiring modification access</li><li>Restricts changes to metadata, permissions, and LF-Tags</li><li>Create IAM principals with recommended read-only permissions and add via console, SDK, or CLI</li><li>Available in all commercial regions where Lake Formation and Glue Data Catalog operate</li></ul><p>The Read-Only Administrator role enhances Lake Formation governance by enabling secure auditing and validation capabilities while maintaining strict change restrictions.</p></div>


Related articles