Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

s3/hive: allow the use of the AWS default credentials provider #24849

Open
thda opened this issue Jan 30, 2025 · 1 comment
Open

s3/hive: allow the use of the AWS default credentials provider #24849

thda opened this issue Jan 30, 2025 · 1 comment

Comments

@thda
Copy link

thda commented Jan 30, 2025

There is no documented way to use the AWS default credentials provider for hive / native s3.

It is useful to support all the identity sources (ec2 instance metadata, EKS pod identity, temporary credentials, credentials helper, AWS IAM Roles Anywhere) and allows setting up Trino using the canonical AWS setup process.

I suggest:

  • adding a s3.credentials-provider parameter to the native s3 implementation (similar to what's done in legacy s3)
  • adding hive.metastore.glue.credentials-provider to the AWS Glue catalog configuration properties

This would add flexibility for the user to chose its preferred auth method, and write custom classes to do so.

Thanks

@electrum
Copy link
Member

electrum commented Feb 2, 2025

If you don't specify any credential configuration, then it should use the default provider.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

No branches or pull requests

2 participants