Manage Data Asset Access

Access to a catalog data asset is a subscription over a published listing. Request it, decide on it, share it, audit it, remove it. And prove each of those actually took effect.

Overview

You SHOULD execute commands through AWS MCP server tools when connected: they give validation, sandboxed execution and audit logging, which matter more than usual in a skill whose failures are security misstatements. Fall back to the AWS CLI when the MCP server is unavailable; every step here is expressed as CLI calls, so it runs either way. You MUST explain each grant or revoke before executing it, and you MUST report what you verified afterwards.

Runtime requirements, stated before the first command block: