You can now restrict access to specific AWS Glue Data Catalog objects with resource-based policies and resource-level permissions. You can set up a resource-based policy on your AWS Glue Data Catalog to give AWS Identify and Access Management (IAM) users and roles granular access to metadata definitions of databases , tables , connections , and user-defined functions . You can also restrict access to specific objects in the AWS Glue Data Catalog using resource-level permissions in identity-based policies (IAM policies).