Merge pull request #100 from segmentio/repo-sync

bot-docsteam · web-flow · commit bfa4a6cf4250 · 2021-11-02T17:06:04.000-07:00
repo sync
diff --git a/src/connections/storage/data-lakes/data-lakes-manual-setup.md b/src/connections/storage/data-lakes/data-lakes-manual-setup.md
@@ -66,7 +66,11 @@ The following steps provide examples of the IAM Role and IAM Policy.
 
 ### IAM Role
 
-Create a `segment-data-lake-role` role for Segment to assume. Attach the following trust relationship document to the role:
+Create a `segment-data-lake-role` for Segment to assume. The trust relationship document you attach to the role will be different depending on your workspace region. 
+
+#### IAM Role for Data Lakes created in US workspaces:
+
+Attach the following trust relationship document to the role to create a `segment-data-lake-role` role for Segment:
 
 ```json
 {
@@ -98,6 +102,41 @@ Create a `segment-data-lake-role` role for Segment to assume. Attach the followi
 > note ""
 > **NOTE:** Replace the `ExternalID` list with the Segment `WorkspaceID` that contains the sources to sync to the Data Lake.
 
+#### IAM Role for Data Lakes created in EU workspaces:
+
+> info ""
+> EU workspaces are currently in beta. If you would like to learn more about the beta, please contact your account manager. 
+
+Attach the following trust relationship document to the role to create a `segment-data-lake-role` role for Segment.
+
+```json
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Sid": "",
+      "Effect": "Allow",
+      "Principal": {
+        "AWS": [
+          "arn:aws:iam::595280932656:role/segment-datalakes-production-access",
+        ]
+      },
+      "Action": "sts:AssumeRole",
+      "Condition": {
+        "StringEquals": {
+          "sts:ExternalId": [
+            "WORKSPACE_ID"
+          ]
+        }
+      }
+    }
+  ]
+}
+```
+
+> note ""
+> **NOTE:** Replace the `ExternalID` list with the Segment `WorkspaceID` that contains the sources to sync to the Data Lake.
+
 ### IAM Policy
 
 Add a policy to the role created above to give Segment access to the relevant Glue databases and tables, EMR cluster, and S3.
