[GitHub] [kylin] hit-lacus commented on a diff in pull request #1854: Fix doc and downgrade log level

[GitBox <gi...@apache.org>]

hit-lacus commented on code in PR #1854:
URL: https://github.com/apache/kylin/pull/1854#discussion_r847128763


##########
readme/prerequisites.md:
##########
@@ -21,6 +21,14 @@ Users need the following permissions to ensure that subsequent operations can pr
 | **STS**             | **Limited**: Write                                     | All Resources | None              |
 | **Systems Manager** | **Limited**: Write                                     | All Resources | None              |
 
+> Note: 

Review Comment:
   I recommend you to used following text to replace your description.
   
   ```
   [AWS IAM](https://docs.aws.amazon.com/IAM/latest/UserGuide/introduction.html) is a AWS web service to control who is authenticated (signed in) and authorized (has permissions) to use AWS resources. To make you account has the sufficient permissions, such as create and destroy EC2 instances, read and write file to s3 buckets, execute command remotely, we use [IAM policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html) to manage permissions for AWS account you used.  Because the AWS IAM has limit [Policy size exceeds identity policy quota](https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-reference-policy-checks.html), you can choose two methods to create policy.
   
   - Method 1 : Create single IAM policy for each AWS Service, such as **Kylin_S3_Policy** for AWS S3. So you need to create 8 IAM policies and link them to your account separately.
   - Method 2: Create a single IAM to cover all  AWS Services.
   ```



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@kylin.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org