Hi, I have implemented Credential Vending on our Iceberg REST Catalog in the Hive Metastore. I'd appreciate it if you could help code reviews.
https://github.com/apache/hive/pull/6458 Credential Vending is getting a lot of attention in 2026. Some articles[1] say we lack the capability. Apache Ozone also introduced its own Security Token Service[2]. The feature could introduce major security issues, as Apache Polaris has issued multiple related CVEs. However, if we implement it safely and add more storage providers, I believe it will be a very attractive feature when it becomes a real movement. Best, Okumin - [1] https://iotdigitaltwinplm.com/iceberg-catalogs-polaris-vs-nessie-vs-unity-comparison-2026/ - [2] https://ozone.apache.org/docs/next/administrator-guide/operations/s3/sts/ - [3] https://polaris.apache.org/community/security-report/
