[
https://issues.apache.org/jira/browse/HADOOP-16066?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17351893#comment-17351893
]
Steve Loughran commented on HADOOP-16066:
-----------------------------------------
DT should use Audit manager instead
> S3a DelegationToken bindings to to support a "correlation ID" for the UA
> header
> -------------------------------------------------------------------------------
>
> Key: HADOOP-16066
> URL: https://issues.apache.org/jira/browse/HADOOP-16066
> Project: Hadoop Common
> Issue Type: Sub-task
> Components: fs/s3
> Reporter: Steve Loughran
> Priority: Minor
>
> to help track down which user is using an assigned role from a DT, allow the
> DT binding to provide some kind of DT/correlation ID. The binding can then
> build that up when the token is issued, and then serve it up later
> If this is picked up and added to the UA header, then S3 logs can let you go
> backwards from requests to the specific DT issues/used, and then even the
> principal.
> For the standard bindings, we'd return: principal + UUID
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
