Skip to content

Move lineage AWS IAM permissions into compute env and manual setup pages#1401

Merged
justinegeffen merged 8 commits into
masterfrom
chiusole/relocate-lineage-aws-permissions
May 13, 2026
Merged

Move lineage AWS IAM permissions into compute env and manual setup pages#1401
justinegeffen merged 8 commits into
masterfrom
chiusole/relocate-lineage-aws-permissions

Conversation

@bebosudo
Copy link
Copy Markdown
Member

@bebosudo bebosudo commented May 8, 2026

Summary

Addresses the suggestion in #1383 (comment): #1383 (comment)

  • AWS Batch and AWS Cloud pages: add a new Data lineage (optional) section under Required Platform IAM permissions with the Platform integration credentials (SQS queue management + S3 bucket notifications), scoped to <REGION>/<ACCOUNT_ID> for SQS
  • Manual AWS Batch setup page: add the lineage S3 bucket policy to the Create an EC2 instance role section, for users who manage their own roles rather than using Batch Forge
  • Data lineage page: replace the inline policy blocks with cross-references to the two pages above, split by role type (integration credentials vs. instance/head job role)

Test plan

  • Check Netlify preview for platform-cloud/docs/compute-envs/aws-batch, aws-cloud, data/data-lineage, and enterprise/advanced-topics/manual-aws-batch-setup
  • Verify anchor links #data-lineage-optional resolve correctly in both compute env pages
  • Verify cross-reference links in data-lineage.md resolve correctly

🤖 Generated with Claude Code

Relocates the lineage-specific AWS IAM policies from the data-lineage
page into the appropriate IAM reference pages, so users don't need to
visit a separate page to find the full set of permissions required.

- AWS Batch and AWS Cloud: add Data lineage (optional) section with
  Platform integration credentials (SQS + S3 bucket notifications),
  locked down to <REGION>/<ACCOUNT_ID> for SQS
- manual-aws-batch-setup: add lineage S3 policy to the EC2 instance
  role section for users managing their own roles
- data-lineage: replace policy blocks with cross-references to the
  above pages

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@netlify
Copy link
Copy Markdown

netlify Bot commented May 8, 2026

Deploy Preview for seqera-docs ready!

Name Link
🔨 Latest commit b045569
🔍 Latest deploy log https://app.netlify.com/projects/seqera-docs/deploys/6a04b8c044e73d000835ccc6
😎 Deploy Preview https://deploy-preview-1401--seqera-docs.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@bebosudo bebosudo marked this pull request as ready for review May 8, 2026 15:29
@bebosudo
Copy link
Copy Markdown
Member Author

bebosudo commented May 8, 2026

ready for review, please check that the service role change makes sense, I haven't touched that part of the docs

Copy link
Copy Markdown
Member

@robnewman robnewman left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

Copy link
Copy Markdown
Member

@christopher-hakkaart christopher-hakkaart left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please check the meaning is retained.

Comment thread platform-cloud/docs/compute-envs/aws-batch.md Outdated
Comment thread platform-cloud/docs/compute-envs/aws-cloud.md Outdated
Comment thread platform-cloud/docs/enterprise/advanced-topics/manual-aws-batch-setup.mdx Outdated
Comment thread platform-cloud/docs/compute-envs/aws-cloud.md Outdated
Comment thread platform-cloud/docs/compute-envs/aws-batch.md Outdated
Co-authored-by: Chris Hakkaart <chris.hakkaart@seqera.io>
Signed-off-by: Alberto Chiusole <1922124+bebosudo@users.noreply.github.com>
@bebosudo
Copy link
Copy Markdown
Member Author

What's the plan for enterprise, will data lineage be released with v26.1? is it already documented in the v26.1 branch?

justinegeffen and others added 5 commits May 12, 2026 20:24
Co-authored-by: Chris Hakkaart <chris.hakkaart@seqera.io>
Signed-off-by: Justine Geffen <justinegeffen@users.noreply.github.com>
…h-setup.mdx

Co-authored-by: Chris Hakkaart <chris.hakkaart@seqera.io>
Signed-off-by: Justine Geffen <justinegeffen@users.noreply.github.com>
Co-authored-by: Chris Hakkaart <chris.hakkaart@seqera.io>
Signed-off-by: Justine Geffen <justinegeffen@users.noreply.github.com>
@justinegeffen
Copy link
Copy Markdown
Contributor

What's the plan for enterprise, will data lineage be released with v26.1? is it already documented in the v26.1 branch?

It's going to be in 26.1 and there's a PR with those doc changes here: #1414.

@justinegeffen justinegeffen merged commit 52ae1b0 into master May 13, 2026
1 check failed
@justinegeffen justinegeffen deleted the chiusole/relocate-lineage-aws-permissions branch May 13, 2026 17:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants