1. To enable a workspace for Unity Catalog:
   1. Create an S3 bucket and IAM role (AWS | GCP) or Access Connector (Azure) that Unity Catalog will use as the default for managed tables (AWS | Azure | GCP)
   2. Create a metastore using that IAM role (AWS | GCP) or Access Connector (Azure) and attach that metastore to each of the workspace you would like have access to that metastore.
2. For securing access to buckets, folders, and blobs in S3/ADLS/GCS:
   1. For access to data in the default S3/ADLS/GCS bucket/container:
      1. A Managed Storage Credential (AWS | Azure | GCP) was automatically created when the metastore was set up.
      2. Create an External Location (AWS | Azure | GCP) using that Managed Storage Credential to scope down access to the specific storage path within that bucket/container you want to grant access to.
      3. Grant access to that External Location to the groups that you want to be able to read/write or create tables on top of those S3/ADLS/GCS locations (AWS | Azure | GCP)

Continued Below