> ## Documentation Index
> Fetch the complete documentation index at: https://docs.summation.com/llms.txt
> Use this file to discover all available pages before exploring further.

# AWS Glue

> Connect Summation to Iceberg, Parquet, and CSV tables registered in AWS Glue.

The AWS Glue connector lets you browse a Glue Data Catalog and add selected S3-backed tables as Summation datasets. Selected tables are deployed through Spice's native Glue data connector.

## Supported tables

The connector shows Glue tables that:

* Store data in Amazon S3.
* Use Apache Iceberg, Parquet, or CSV format.

Tables backed by Kinesis, Kafka, or unsupported file formats are not shown. Use the S3 connector when data is not registered in Glue.

## What you'll need

* The 12-digit **AWS account ID** that owns the Glue Data Catalog.
* The AWS **region** containing the catalog.
* AWS credentials with read access to Glue and the S3 locations referenced by the selected tables.

<Tip>
  Use a dedicated read-only IAM principal and scope its S3 permissions to the table prefixes Summation should read.
</Tip>

## Form fields

| Field                 | Required | Stored as | Notes                                                        |
| --------------------- | -------- | --------- | ------------------------------------------------------------ |
| **AWS Account ID**    | Yes      | Config    | The 12-digit account ID for the Glue Data Catalog.           |
| **AWS Region**        | Yes      | Config    | Region containing the Glue catalog, for example `us-west-2`. |
| **Access Key ID**     | Yes      | Secret    | Long-lived AWS access key ID beginning with `AKIA`.          |
| **Secret Access Key** | Yes      | Secret    | Secret access key matching the access key ID.                |

## IAM policy

The credentials need permission to browse Glue and read the S3 objects referenced by selected tables. Replace the account, bucket, and prefix values with your own.

```json theme={null}
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "glue:GetCatalog",
        "glue:GetDatabases",
        "glue:GetDatabase",
        "glue:GetTables",
        "glue:GetTable"
      ],
      "Resource": [
        "arn:aws:glue:us-west-2:123456789012:catalog",
        "arn:aws:glue:us-west-2:123456789012:database/*",
        "arn:aws:glue:us-west-2:123456789012:table/*/*"
      ]
    },
    {
      "Effect": "Allow",
      "Action": ["s3:ListBucket"],
      "Resource": "arn:aws:s3:::my-bucket",
      "Condition": {
        "StringLike": { "s3:prefix": ["data/*"] }
      }
    },
    {
      "Effect": "Allow",
      "Action": ["s3:GetObject"],
      "Resource": "arn:aws:s3:::my-bucket/data/*"
    }
  ]
}
```

See the [Spice Glue connector documentation](https://spiceai.org/docs/components/data-connectors/glue) for format support and authentication behavior.

## Adding datasets

In the final wizard step, browse Glue databases and select tables. Each selected table uses a Glue source reference:

```text theme={null}
glue:analytics.orders
```

The browser reads Glue metadata before deployment. Once selected, Spice resolves the table's S3 location and format from the same Glue catalog.

## Common problems

| Error or symptom                               | Likely cause                                                                                        |
| ---------------------------------------------- | --------------------------------------------------------------------------------------------------- |
| `AWS Glue authentication failed`               | The credentials are invalid, expired, or missing Glue permissions.                                  |
| No databases appear                            | The principal lacks `glue:GetDatabases`, or the account ID and region identify a different catalog. |
| A table is missing                             | The table is not S3-backed, uses an unsupported format, or the principal lacks metadata access.     |
| Dataset deployment fails with S3 access denied | The principal can browse Glue but cannot read the table's S3 data files.                            |
| Temporary credentials fail validation          | Use a long-lived read-only IAM access key for the connector.                                        |