AWS Lake Formation helps centralize and simplify data lake security management and governance at scale, and enables fine-grained permissions across your data lake. It provides database, table, column, row and cell level permissioning using tag-based or name-based access controls, and cross-account sharing at no charge.
-
Permissions
-
Storage API
-
Governed Tables
-
Storage optimizer
-
Permissions
-
AWS Lake Formation provides database, table, column, row and cell-level permissions using tag-based or name-based access controls, and cross-account sharing. AWS Lake Formation integrates with services like AWS Glue, Amazon Athena, Amazon Redshift, Amazon CloudTrail, and others.
Pricing
Creating permissions listed above or using permissions by integrated services are provided at no charge.Additional charges
Standard usage rates for integrated services, like Amazon S3 or AWS Glue Data Catalog, will apply based on pricing for these services.Pricing examples
Data catalog example: Let’s consider that you store one million tables in your data catalog in a given month, you make one million requests to access these tables, and you have ten name-based access controls on your tables. You pay $0 for the Glue Data Catalog because your usage is covered under the free tier. You pay $0 for the permissions in AWS Lake Formation because they are provided at no charge. -
Storage API
-
The AWS Lake Formation Storage API scans and filters data with all AWS Lake Formation policies applied using an internal filtering engine. You can use Storage API only when you use no other AWS Analytics service to process the data. You are charged for the number of bytes scanned by the Storage API, rounded to the next megabyte, with a 10MB minimum.
Optimizing filtering costs: You can optimize your filtering by storing your data in columnar file formats like Parquet and ORC. The Lake Formation Storage API can leverage predicate pushdown and partition pruning optimizations to only read the data required to satisfy the query and scan less data, resulting in a lower data scanned cost.
-
Governed Tables
-
With AWS Lake Formation Governed Tables, an AWS managed table type on Amazon S3, you are charged for the amount of metadata in number of files tracked, API calls that retrieve or manipulate the metadata, and the number of bytes processed by the storage optimizer, rounded to the next megabyte.
-
Storage optimizer
-
The storage optimizer runs in the background and optimizes the layout of Governed Tables by compacting small files into larger ones to improve query performance in analytics engines. You are charged for the number of bytes processed by the storage optimizer, rounded to the next megabyte. For storage optimization for other table types, refer to the Data Catalog tab of the AWS Glue Pricing page.
Additional pricing resources
Easily calculate your monthly costs with AWS
Contact AWS specialists to get a personalized quote
Find resources on AWS Lake Formation such as documentation, videos, and articles.
Start building with AWS Lake Formation in the AWS Management Console.