Let's return to the Lake Formation console to set data permissions for a campaign manager.
  1. Click on Grant button in the Data permissions window
  2. On the window that pops up, for IAM users and roles drop down select lf-campaign-manager, choose tpc for the database with all tables except for the dl_tpc_web_page table and Select as the only Table permission
  3. Leave the Grantable permissions unselected and click on the Grant button.
Let's now test out these data permissions we defined for different personas with Amazon Athena.