Permissions required for querying tables with cell-level filtering - AWS Lake Formation
This documentation is a draft for private preview for regions in the AWS European Sovereign Cloud. Documentation content will continue to evolve. Published: January 10, 2026.

Permissions required for querying tables with cell-level filtering

The following AWS Identity and Access Management (IAM) permissions are required to run queries against tables with cell-level filtering.

JSON
{
    "Version":"2012-10-17",		 	 	 
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "lakeformation:StartQueryPlanning",
                "lakeformation:GetQueryState",
                "lakeformation:GetWorkUnits",
                "lakeformation:GetWorkUnitResults"
            ],
            "Resource": "*"
        }
    ]
}

For more information about Lake Formation permissions, see Lake Formation personas and IAM permissions reference.