aws-glue-iam

==IAM Roles:
1) AWSGlueServiceRoleDefault
	-AWSGlueServiceRole
	-SecretsManagerReadWrite
	-AWSGlueKMS
	-AWSGlueS3

2) AWSGlueServiceNotebookRoleDefault
	-AWSGlueServiceNotebookRole
	-SecretsManagerReadWrite
	-AWSGlueS3
	-AWSGlueKMS

==IAM Policies:
1) AWSGlueKMS
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Action": [
                "kms:Encrypt",
                "kms:Decrypt"
            ],
            "Resource": [
                "*"
            ],
            "Effect": "Allow"
        }
    ]
}

2) AWSGlueS3
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "s3:*",
                "s3-object-lambda:*"
            ],
			"Resource": [
				"arn:aws:s3:::aws-glue-*"
			]
        }
    ]
}