[ 
https://issues.apache.org/jira/browse/HADOOP-15671?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16583376#comment-16583376
 ] 

Steve Loughran commented on HADOOP-15671:
-----------------------------------------

If you haven't already, take a look at the S3A assumed role stuff, in 
HADOOP-15583 and HADOOP-15141; especially tests. Most of the work there has 
come from the ability of the AWS STS service to restrict the rights of the 
role, in their JSON language. If your service can do that, plan ahead

* Can you split the SDK update into its own patch, or make clear in the JIRA 
summary that this happens. JAR updates are big enough to merit their own effort 
(see [qualifying AWS 
SDK|https://github.com/apache/hadoop/blob/trunk/hadoop-tools/hadoop-aws/src/site/markdown/tools/hadoop-aws/testing.md#-qualifying-an-aws-sdk-update]
 and HADOOP-15642 as examples.

* minor: can you replace the strings in the tests with a reference to some 
constant (e.g name of provider class). repeating the strings can only increase 
maintenance.


> AliyunOSS: Support Assume Roles in AliyunOSS
> --------------------------------------------
>
>                 Key: HADOOP-15671
>                 URL: https://issues.apache.org/jira/browse/HADOOP-15671
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: fs/oss
>    Affects Versions: 3.1.0, 2.10.0, 2.9.1, 3.2.0, 3.0.3
>            Reporter: wujinhu
>            Assignee: wujinhu
>            Priority: Major
>         Attachments: HADOOP-15671.001.patch
>
>
> We will add assume role function in Aliyun OSS.
> For details about assume role and sts token, click the link below:
> [https://www.alibabacloud.com/help/doc-detail/31935.html?spm=a2c5t.11065259.1996646101.searchclickresult.1fad155aKOUvJZ]
>  



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: common-issues-h...@hadoop.apache.org

Reply via email to