AWS Glue

The AWS Glue connector lets you browse a Glue Data Catalog and add selected S3-backed tables as Summation datasets. Selected tables are deployed through Spice’s native Glue data connector.

Supported tables

The connector shows Glue tables that:

Store data in Amazon S3.
Use Apache Iceberg, Parquet, or CSV format.

Tables backed by Kinesis, Kafka, or unsupported file formats are not shown. Use the S3 connector when data is not registered in Glue.

What you’ll need

The 12-digit AWS account ID that owns the Glue Data Catalog.
The AWS region containing the catalog.
AWS credentials with read access to Glue and the S3 locations referenced by the selected tables.

Use a dedicated read-only IAM principal and scope its S3 permissions to the table prefixes Summation should read.

Form fields

Field	Required	Stored as	Notes
AWS Account ID	Yes	Config	The 12-digit account ID for the Glue Data Catalog.
AWS Region	Yes	Config	Region containing the Glue catalog, for example `us-west-2`.
Access Key ID	Yes	Secret	Long-lived AWS access key ID beginning with `AKIA`.
Secret Access Key	Yes	Secret	Secret access key matching the access key ID.

IAM policy

The credentials need permission to browse Glue and read the S3 objects referenced by selected tables. Replace the account, bucket, and prefix values with your own.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "glue:GetCatalog",
        "glue:GetDatabases",
        "glue:GetDatabase",
        "glue:GetTables",
        "glue:GetTable"
      ],
      "Resource": [
        "arn:aws:glue:us-west-2:123456789012:catalog",
        "arn:aws:glue:us-west-2:123456789012:database/*",
        "arn:aws:glue:us-west-2:123456789012:table/*/*"
      ]
    },
    {
      "Effect": "Allow",
      "Action": ["s3:ListBucket"],
      "Resource": "arn:aws:s3:::my-bucket",
      "Condition": {
        "StringLike": { "s3:prefix": ["data/*"] }
      }
    },
    {
      "Effect": "Allow",
      "Action": ["s3:GetObject"],
      "Resource": "arn:aws:s3:::my-bucket/data/*"
    }
  ]
}

See the Spice Glue connector documentation for format support and authentication behavior.

Adding datasets

In the final wizard step, browse Glue databases and select tables. Each selected table uses a Glue source reference:

glue:analytics.orders

The browser reads Glue metadata before deployment. Once selected, Spice resolves the table’s S3 location and format from the same Glue catalog.

Common problems

Error or symptom	Likely cause
`AWS Glue authentication failed`	The credentials are invalid, expired, or missing Glue permissions.
No databases appear	The principal lacks `glue:GetDatabases`, or the account ID and region identify a different catalog.
A table is missing	The table is not S3-backed, uses an unsupported format, or the principal lacks metadata access.
Dataset deployment fails with S3 access denied	The principal can browse Glue but cannot read the table’s S3 data files.
Temporary credentials fail validation	Use a long-lived read-only IAM access key for the connector.

Get started

Features

API & Integrations

API Reference

Supported tables

What you’ll need

Form fields

IAM policy

Adding datasets

Common problems

​Supported tables

​What you’ll need

​Form fields

​IAM policy

​Adding datasets

​Common problems

Supported tables

What you’ll need

Form fields

IAM policy

Adding datasets

Common problems