Let's return to the Lake Formation console to set data permissions for a business analyst persona.
  1. Click on Grant button in the Data permissions window
  2. On the window that pops up, for IAM users and roles drop down select lf-business-analyst, choose tpc for the database and select dl_tpc_customer table with PII columns excluded and Select as the only Table permission
  3. Leave the Grantable permissions unselected and click on the Grant button.
  4. For the customer table, a lf-business-analyst will only be able to see non-PII columns.