You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I had searched in the issues and found no similar issues.
Description
Some Iceberg REST catalog implementations like Gravitino provide credential vending features to manage security information centrally and safely. If user has the right privilege to access the table, IRC server will generate a temporary token to access the underlying storage. Please refer to https://gravitino.apache.org/docs/0.8.0-incubating/security/credential-vending for more details about credential vending in Gravitino.
Use case
After supports credential vending, all security information is managed in Iceberg REST server, which means:
user doesn't need to specify AKSK when creating catalogs
User could use temporary scoped token to access the data without the risk of leaking the AKSK.
Search before asking
Description
Some Iceberg REST catalog implementations like
Gravitino
provide credential vending features to manage security information centrally and safely. If user has the right privilege to access the table, IRC server will generate a temporary token to access the underlying storage. Please refer to https://gravitino.apache.org/docs/0.8.0-incubating/security/credential-vending for more details about credential vending in Gravitino.Use case
After supports credential vending, all security information is managed in Iceberg REST server, which means:
Related issues
No response
Are you willing to submit PR?
Code of Conduct
The text was updated successfully, but these errors were encountered: