Results of 1 - 3 of about 3 for sts (0.001 sec.)
- S3 and AWS Authentication 10901
- This page is the entry point for authenticating to S3 and other AWS services from DuckDB. Authentication is configured using secrets , and the detailed reference material lives on the S3 API Support and AWS Extension pages. The sections bel
...in with AWS IAM Identity Center (SSO) credential_chain with the sso chain Single Sign-On (SSO) You assume an IAM role via STS credential_chain with the sts chain Assuming a Role (STS) You run on Amazon EKS with IAM Roles for Service Accounts (IRSA)...for each method. The individual mechanisms are documented on the AWS Extension page: Selecting a Profile Assuming a Role (STS) Web Identity (IRSA) Single Sign-On (SSO) For behavior common to all credential_chain secrets, see Region Resolution , Val... - https://man.mtool.work/duckdb/2.0/core_extensions/httpfs/authentication.html
- AWS Extension 10287
- The aws extension adds functionality, e.g., authentication, on top of the httpfs extension's S3 capabilities , using the AWS SDK. Installing and Loading The aws extension will be transparently autoloaded on first use from the official exten
...secret ( TYPE s3, PROVIDER credential_chain, CHAIN 'env;config' ); The possible values for CHAIN are the following: config sts sso env instance process web_identity (for IAM Roles for Service Accounts (IRSA) ; see Web Identity (IRSA) ) The credentia...); This approach is equivalent to the deprecated S3 API 's method load_aws_credentials('⟨my_profile⟩') . Assuming a Role (STS) To assume an IAM role, pass its ARN via ASSUME_ROLE_ARN . An EXTERNAL_ID can be supplied for the role's trust policy: CRE...ATE OR REPLACE SECRET secret ( TYPE s3, PROVIDER credential_chain, CHAIN 'sts', ASSUME_ROLE_ARN 'arn:aws:iam::⟨account_id⟩:role/⟨role⟩', EXTERNAL_ID '⟨external_id⟩', REGION '⟨us-east-1⟩' ); The sts ch... - https://man.mtool.work/duckdb/2.0/core_extensions/aws.html
- Catalogs 6678
- The iceberg extension supports attaching Iceberg REST Catalogs. Attaching a catalog is required for writing to Iceberg . Before attaching an Iceberg REST Catalog, you must install the iceberg extension by following the instructions located
...S Glue) catalog. Create an S3 secret using the Secrets Manager : CREATE SECRET ( TYPE s3, PROVIDER credential_chain, CHAIN sts, ASSUME_ROLE_ARN 'arn:aws:iam::⟨account_id⟩:role/⟨role⟩', REGION 'us-east-2' ); In this example we use an STS token, but o...ens expire after 1 hour. For long-running sessions, you'll need to refresh the token periodically. Catalogs with Limited REST Spec Support Some catalogs implement a subset of the Iceberg REST Catalog specification. Use the compatibility options belo... - https://man.mtool.work/duckdb/2.0/core_extensions/iceberg/catalogs.html
PREV
1
NEXT
DuckDB 2.0 Documentation / man.mtool.work