Asset Identification and Management

Asset Identification

• Asset information: metadata and data permission policy information.
• Account information: Users are unaware of the account information in LakeFormation.
• API mapping table: For details, see API Reference.
• Tenant resources: LakeFormation needs to read user group and user information, create and delete OBS file directories, and access OBS tag permission APIs.

Recommended Security Configuration

N/A

Infrastructure Security

• LakeFormation instances run in a cross-AZ cluster. The failure of a single AZ does not affect the running of LakeFormation instances.
• LakeFormation instances use cross-AZ highly reliable storage media to store data persistently. The failure of a single AZ does not cause data loss of LakeFormation instances.