User Guide

When setting the Output Path within a Protected Data Domain (PDD) and running a Privitar AWS Glue Batch Job, you should ensure that you only use an Amazon S3 bucket that you consider a safe and secure destination for your data.

To protect users from writing to unsanctioned Amazon S3 buckets in other AWS Accounts to the Privitar deployment (with a Privitar AWS Glue Batch Job), administrators must configure a list of Amazon S3 buckets that can be accessible. You might need to contact a system administrator to modify this configuration.

When output data is written to an Amazon S3 bucket that does not reside within the same AWS account as the Privitar Data Privacy Platform deployment, Privitar AWS Glue Batch Jobs automatically enables this output data to be read by the destination AWS account. This ensures that the data is accessible to end users operating from the destination AWS account. You should ensure that you only use Amazon S3 buckets that are owned by AWS accounts you know.