glue:CreateSession is a Write access-level action in the glue service. Grants permission to create an interactive session
ARNs that glue:CreateSession can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants glue:CreateSession.
Filters access by the presence of tag key-value pairs in the request
Filters access by the presence of tag keys in the request
Filters access by the ID of security groups configured for the Glue job
Filters access by the ID of subnets configured for the Glue job
Filters access by the ID of the VPC configured for the Glue job
Filters access by tag key-value pairs attached to the resource
A minimal policy that allows glue:CreateSession. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowGlueCreateSession",
"Effect": "Allow",
"Action": "glue:CreateSession",
"Resource": "*"
}
]
}