Results of 1 - 9 of about 9 for sso (0.001 sec.)
- AWS Extension 13553
- The aws extension adds functionality, e.g., authentication, on top of the httpfs extension's S3 capabilities , using the AWS SDK. Installing and Loading The aws extension will be transparently autoloaded on first use from the official exten
...low, which fetches credentials automatically using the AWS SDK. It is provided by the aws extension and supports profiles, SSO, assumed roles, web identities (IRSA), and instance metadata. The full list of S3 secret parameters that apply to both pro...et ( TYPE s3, PROVIDER credential_chain, CHAIN 'env;config' ); The possible values for CHAIN are the following: config sts sso env instance process web_identity (for IAM Roles for Service Accounts (IRSA) ; see Web Identity (IRSA) ) The credential_ch...t_id⟩:role/⟨role⟩', WEB_IDENTITY_TOKEN_FILE '⟨/var/run/secrets/eks.amazonaws.com/serviceaccount/token⟩' ); Single Sign-On (SSO) DuckDB can use credentials obtained through AWS IAM Identity Center (formerly AWS SSO). DuckDB does not perform the sign-... - https://man.mtool.work/duckdb/2.0/core_extensions/aws.html
- S3 and AWS Authentication 10569
- This page is the entry point for authenticating to S3 and other AWS services from DuckDB. Authentication is configured using secrets , and the detailed reference material lives on the S3 API Support and AWS Extension pages. The sections bel
...ls or ~/.aws/config profiles credential_chain with a profile Selecting a Profile You sign in with AWS IAM Identity Center (SSO) credential_chain with the sso chain Single Sign-On (SSO) You assume an IAM role via STS credential_chain with the sts cha...ntial_chain Provider The credential_chain provider fetches credentials automatically using the AWS SDK, covering profiles, SSO, assumed roles, web identities (IRSA), and instance metadata. To use the AWS SDK default provider: CREATE OR REPLACE SECRE...ms are documented on the AWS Extension page: Selecting a Profile Assuming a Role (STS) Web Identity (IRSA) Single Sign-On (SSO) For behavior common to all credential_chain secrets, see Region Resolution , Validation , and Auto-Refresh . Secret Param... - https://man.mtool.work/duckdb/2.0/core_extensions/httpfs/authentication.html
- S3 Parquet Import 8268
- Prerequisites To load a Parquet file from S3, the httpfs extension is required. This can be installed using the INSTALL SQL command. This only needs to be run once. INSTALL httpfs; To load the httpfs extension for usage, use the LOAD SQL co
...ly via ENDPOINT 's3.⟨your-region⟩.amazonaws.com' . To fetch credentials automatically instead — or to use a named profile, SSO, or an assumed role — see the aws extension . The default looks like: CREATE SECRET ( TYPE s3, PROVIDER credential_chain )... - https://man.mtool.work/duckdb/2.0/guides/network_cloud_storage/s3_import.html
- PostgreSQL Extension and the Secret Manager 8196
- User credentials and other PostgreSQL database connection details can be stored using the DuckDB Secrets Manager . The following syntax can be used to create a secret: CREATE SECRET ( TYPE postgres, HOST '127.0.0.1', PORT 5432, DATABASE pos
...th-token command in the example above: sql CREATE SECRET aws_rds_secret1 ( TYPE rds, PROVIDER credential_chain, CHAIN 'env;sso;', REGION 'eu-west-1', RDS_USER 'postgres', RDS_HOST 'database-1-instance-1.xxxxxxxxxxxx.eu-west-1.rds.amazonaws.com', RDS...ABLE duckdb_secrets ); CREATE OR REPLACE SECRET s3_secret1 IN postgres_p1 ( TYPE s3, PROVIDER credential_chain, CHAIN 'env;sso;', PROFILE 'DatabaseAdministrator-⟨account_id⟩', REGION 'eu-west-1' ); When IN postgres_⟨attached_database⟩ clause of CREA... - https://man.mtool.work/duckdb/2.0/core_extensions/postgres/secrets.html
- S3 Parquet Export 8196
- To write a Parquet file to S3, the httpfs extension is required. This can be installed using the INSTALL SQL command. This only needs to be run once. INSTALL httpfs; To load the httpfs extension for usage, use the LOAD SQL command: LOAD htt
...ly via ENDPOINT 's3.⟨your-region⟩.amazonaws.com' . To fetch credentials automatically instead — or to use a named profile, SSO, or an assumed role — see the aws extension . The default looks like: CREATE SECRET ( TYPE s3, PROVIDER credential_chain )... - https://man.mtool.work/duckdb/2.0/guides/network_cloud_storage/s3_export.html
- Amazon RDS with IAM Authentication 8124
- Managed PostgreSQL databases on Amazon RDS and Aurora can authenticate with short-lived IAM tokens instead of a static password. DuckDB supports this through the postgres and aws extensions: the aws extension generates the token from an AWS
...AWS credential chain to mint the IAM token: CREATE SECRET aws_rds_secret ( TYPE rds, PROVIDER credential_chain, CHAIN 'env;sso', REGION '⟨eu-west-1⟩', RDS_USER '⟨postgres⟩', RDS_HOST '⟨instance⟩.⟨identifier⟩.⟨region⟩.rds.amazonaws.com', RDS_PORT '54... - https://man.mtool.work/duckdb/2.0/guides/database_integration/rds_iam.html
- S3 Iceberg Import 8124
- Prerequisites Loading an Iceberg file from S3 requires both the httpfs and iceberg extensions. Install them using the INSTALL SQL command. You only need to install extensions once. INSTALL httpfs; INSTALL iceberg; To load the extensions, us
...DENG/bPxRfiCYEXAMPLEKEY⟩', REGION '⟨us-east-1⟩' ); To fetch credentials automatically instead — or to use a named profile, SSO, or an assumed role — see the aws extension . The default looks like: CREATE SECRET ( TYPE s3, PROVIDER credential_chain )... - https://man.mtool.work/duckdb/2.0/guides/network_cloud_storage/s3_iceberg_import...
- S3 API Support 8052
- The httpfs extension supports reading/writing/ globbing files on object storage servers using the S3 API. S3 offers a standard API to read and write to remote files (while regular http servers, predating S3, do not offer a common write API)
...t'; credential_chain Provider The credential_chain provider automatically fetches credentials using the AWS SDK (profiles, SSO, assumed roles, web identities, instance metadata, and more). It is provided by the aws extension . For example, to use th...OVIDER credential_chain ); For the full set of credential_chain options — CHAIN values, profile selection, assuming roles, SSO, web identity (IRSA), region resolution, validation, and auto-refresh — see the AWS extension page . Overview of S3 Secret... - https://man.mtool.work/duckdb/2.0/core_extensions/httpfs/s3api.html
- Catalogs 7711
- The iceberg extension supports attaching Iceberg REST Catalogs. Attaching a catalog is required for writing to Iceberg . Before attaching an Iceberg REST Catalog, you must install the iceberg extension by following the instructions located
...PE s3, KEY_ID '⟨key_id⟩', SECRET '⟨secret⟩', REGION '⟨region⟩' ); For the full range of credential options (assumed roles, SSO, web identity, and more), see the aws extension . Then, connect to the catalog using your S3 Tables ARN (available in the... - https://man.mtool.work/duckdb/2.0/core_extensions/iceberg/catalogs.html
PREV
1
NEXT
DuckDB 2.0 Documentation / man.mtool.work