This first-of-its-kind integration scales and simplifies data access control, so businesses can get more value from their Amazon S3 data
Immuta, a leader in data security, announced the launch of a new native integration between its data security platform and the Amazon Simple Storage Service object storage service (Amazon S3). This integration provides customers with streamlined data access control and security across storage and compute platforms using Amazon S3 Access Grants, a new Amazon S3 access control feature that allows customers to manage permissions related to large-scale data for user identities managed by enterprise directories. Amazon S3 is an object storage service from Amazon Web Services (AWS) that provides industry-leading durability, scalability, availability, and security, enabling data and security teams to get even more out of value of their Amazon S3 data, reduce costs and increase efficiency.
Amazon S3 stores more than 350 trillion objects with more than 100 million requests per second to process a multitude of workloads, including artificial intelligence (AI) and data analytics. Businesses need a simple, scalable, centralized solution that consistently enforces access control and protects data across data stacks, while maintaining compliance with internal and external regulations. With Immuta’s Data Security Platform and the new Access Grants feature of Amazon S3, users can centralize access control management and leverage Attribute-Based Access Controls (ABAC) to grant grants. permissions to objects in Amazon S3 storage. Immuta leverages Amazon S3 controls to increase efficiency with fewer policies and manual efforts and reduce operational costs, while generating new revenue streams. Amazon S3 integration also helps US government agencies protect sensitive data hosted in AWS GovCloud (US) Regions.
“The amount of data Amazon S3 can store and retrieve is truly impressive. The same goes for the number of platforms that manage and analyze Amazon S3 data every day, such as Databricks, Snowflake, Amazon Redshift, and Amazon EMR. This is why Amazon S3 access control is essential for the astronomical amount of data that passes through this service,” says Steve Touw , CTO of Immuta. “Immuta helps simplify data access and security for data stored in Amazon S3 so users can more securely leverage that data for their analytics and AI initiatives. This, coupled with Immuta’s “write once, apply everywhere” approach, helps customers democratize and increase data usage while adhering to global regulations.”
As part of this new integration, joint customers have access to the following key features:
- The plain language policy generator reduces the need to manually code AWS identity and access management (IAM) policies and access controls to Amazon S3.
- Scalable attribute-based access control supports more use cases and users, and includes a metadata-driven approach to managing policy logic to further improve efficiency.
- Consistent access controls and policies across growing data stacks include support for Amazon S3, Amazon Redshift, Snowflake, Databricks, and Starburst (Trino) .
- Access to Apache Spark for Amazon EMR and other AWS services through Amazon S3 Access Grants provides scalable, attribute-based access control for file reads and table access in Spark jobs.
“By leveraging this new release of Immuta that integrates with Amazon S3 Access Grants, we envision a single control plane for Booking.com governors and data owners to provide access management at scale for all Amazon S3 resources ingested into our data lake (both structured and unstructured),” said Luca Falsina, Principal Software Engineer at Booking.com. “Additionally, because this integration is based on a new access control capability native to Amazon S3, it gives us confidence that controls will be applied consistently, regardless of which technology data consumers choose to access the data.