Results of 1 - 9 of about 9 for Role (0.002 sec.)
- AWS Extension 13750
- The aws extension adds functionality, e.g., authentication, on top of the httpfs extension's S3 capabilities , using the AWS SDK. Installing and Loading The aws extension will be transparently autoloaded on first use from the official exten
...tches credentials automatically using the AWS SDK. It is provided by the aws extension and supports profiles, SSO, assumed roles, web identities (IRSA), and instance metadata. The full list of S3 secret parameters that apply to both providers ( ENDPO...'env;config' ); The possible values for CHAIN are the following: config sts sso env instance process web_identity (for IAM Roles for Service Accounts (IRSA) ; see Web Identity (IRSA) ) The credential_chain provider also allows overriding the automati...file⟩' ); This approach is equivalent to the deprecated S3 API 's method load_aws_credentials('⟨my_profile⟩') . Assuming a Role (STS) To assume an IAM role, pass its ARN via ASSUME_ROLE_ARN . An EXTERNAL_ID can be supplied for the role's trust policy... - https://man.mtool.work/duckdb/2.0/core_extensions/aws.html
- S3 and AWS Authentication 9904
- This page is the entry point for authenticating to S3 and other AWS services from DuckDB. Authentication is configured using secrets , and the detailed reference material lives on the S3 API Support and AWS Extension pages. The sections bel
...You sign in with AWS IAM Identity Center (SSO) credential_chain with the sso chain Single Sign-On (SSO) You assume an IAM role via STS credential_chain with the sts chain Assuming a Role (STS) You run on Amazon EKS with IAM Roles for Service Account...rovider The credential_chain provider fetches credentials automatically using the AWS SDK, covering profiles, SSO, assumed roles, web identities (IRSA), and instance metadata. To use the AWS SDK default provider: CREATE OR REPLACE SECRET secret ( TYP...havior for each method. The individual mechanisms are documented on the AWS Extension page: Selecting a Profile Assuming a Role (STS) Web Identity (IRSA) Single Sign-On (SSO) For behavior common to all credential_chain secrets, see Region Resolution... - https://man.mtool.work/duckdb/2.0/core_extensions/httpfs/authentication.html
- Catalogs 8646
- The iceberg extension supports attaching Iceberg REST Catalogs. Attaching a catalog is required for writing to Iceberg . Before attaching an Iceberg REST Catalog, you must install the iceberg extension by following the instructions located
...ET ( TYPE s3, KEY_ID '⟨key_id⟩', SECRET '⟨secret⟩', REGION '⟨region⟩' ); For the full range of credential options (assumed roles, SSO, web identity, and more), see the aws extension . Then, connect to the catalog using your S3 Tables ARN (available i...log. Create an S3 secret using the Secrets Manager : CREATE SECRET ( TYPE s3, PROVIDER credential_chain, CHAIN sts, ASSUME_ROLE_ARN 'arn:aws:iam::⟨account_id⟩:role/⟨role⟩', REGION 'us-east-2' ); In this example we use an STS token, but other authenti... - https://man.mtool.work/duckdb/2.0/core_extensions/iceberg/catalogs.html
- S3 Parquet Import 8448
- Prerequisites To load a Parquet file from S3, the httpfs extension is required. This can be installed using the INSTALL SQL command. This only needs to be run once. INSTALL httpfs; To load the httpfs extension for usage, use the LOAD SQL co
....⟨your-region⟩.amazonaws.com' . To fetch credentials automatically instead — or to use a named profile, SSO, or an assumed role — see the aws extension . The default looks like: CREATE SECRET ( TYPE s3, PROVIDER credential_chain ); Querying After the... - https://man.mtool.work/duckdb/2.0/guides/network_cloud_storage/s3_import.html
- S3 Parquet Export 8358
- To write a Parquet file to S3, the httpfs extension is required. This can be installed using the INSTALL SQL command. This only needs to be run once. INSTALL httpfs; To load the httpfs extension for usage, use the LOAD SQL command: LOAD htt
....⟨your-region⟩.amazonaws.com' . To fetch credentials automatically instead — or to use a named profile, SSO, or an assumed role — see the aws extension . The default looks like: CREATE SECRET ( TYPE s3, PROVIDER credential_chain ); After the httpfs e... - https://man.mtool.work/duckdb/2.0/guides/network_cloud_storage/s3_export.html
- S3 Iceberg Import 8268
- Prerequisites Loading an Iceberg file from S3 requires both the httpfs and iceberg extensions. Install them using the INSTALL SQL command. You only need to install extensions once. INSTALL httpfs; INSTALL iceberg; To load the extensions, us
...EKEY⟩', REGION '⟨us-east-1⟩' ); To fetch credentials automatically instead — or to use a named profile, SSO, or an assumed role — see the aws extension . The default looks like: CREATE SECRET ( TYPE s3, PROVIDER credential_chain ); Loading Iceberg Ta... - https://man.mtool.work/duckdb/2.0/guides/network_cloud_storage/s3_iceberg_import...
- Release Cycle 8070
- This document outlines the DuckDB and core extension release cycle framework. It is intended for developers working on DuckDB extensions to better understand the underlying processes. Overview DuckDB follows Semantic Versioning ( v<MAJOR>.<
...sed to allow multiple versions of the same codebase to co-exist. At DuckDB, there are two core branches that play the main role in the DuckDB (and extensions) release cycle. We will start off by listing the format these core branches come in. main br...f, these extensions follow the same branching scheme as DuckDB where a combination of main and vx.y-codename play the main role. We will now define the three types of unstable extensions by looking at their number of active branches . Single branch e... - https://man.mtool.work/duckdb/2.0/dev/release_cycle.html
- Quack Remote Protocol 7675
- The Quack extension turns a DuckDB instance into a server that other DuckDB instances (clients) can connect to over HTTP. This page covers the protocol at a glance and walks through basic usage on both sides of the wire. For the full list o
...fy helper: {:.codebox-client} CALL quack_identify( name = 'analytics-1', provider = 'ec2', region = 'eu-west-1', meta = '{"role": "worker"}' ); meta is merged with auto-computed duckdb_version and platform keys; user-supplied keys win on conflict. wh... - https://man.mtool.work/duckdb/2.0/quack/overview.html
- Security 7675
- This page covers Quack's security posture end to end: what the server exposes, what stays local, the role of a TLS-terminating reverse proxy, and the authentication / authorization callbacks the server runs on every connection and every que
... - https://man.mtool.work/duckdb/2.0/quack/security.html
PREV
1
NEXT
DuckDB 2.0 Documentation / man.mtool.work