Amazon SageMaker Lakehouse now supports attribute based access control

Amazon SageMaker Lakehouse now supports Attribute-Based Access Control (ABAC), a new feature that simplifies data access and permission management using IAM principal and session tags.

• Previously, access was granted by directly assigning permissions to specific principals
• ABAC allows administrators to grant permissions based on user attribute keys and values
• Administrators can now assign tags like "team: developers" to provide access
• Automatically grants access to IAM principals with matching tag keys and values
• Works for both in-account and cross-account scenarios
• Eliminates the need for individual policy modifications when new team members join

The feature is available in all AWS regions where SageMaker Lakehouse is supported, providing a more efficient and scalable approach to access management.