Fokko commented on code in PR #4132:
URL: https://github.com/apache/iceberg-python/pull/4132#discussion_r4352187051
##########
mkdocs/docs/configuration.md:
##########
@@ -940,8 +944,8 @@ configures the AWS credentials for both Glue Catalog and S3
FileIO.
| client.secret-access-key | password | Configure the static secret
access key used to access both the Glue/DynamoDB Catalog and the S3 FileIO
|
| client.session-token | AQoDYXdzEJr... | Configure the static session
token used to access both the Glue/DynamoDB Catalog and the S3 FileIO
|
| client.profile-name | default | Configure the AWS profile used
to access both the Glue/DynamoDB Catalog and the S3 FileIO (only supported by
`FsspecFileIO` currently) |
-| client.role-session-name | session | An optional identifier for the
assumed role session.
|
-| client.role-arn | arn:aws:... | AWS Role ARN. If provided
instead of access_key and secret_key, temporary credentials will be fetched by
assuming this role. |
+| client.role-session-name | session | An optional identifier for the
assumed role session used to access both the Glue/DynamoDB Catalog and the S3
FileIO. |
+| client.role-arn | arn:aws:... | AWS Role ARN. If provided
instead of access_key and secret_key, temporary credentials will be fetched by
assuming this role before accessing both the Glue/DynamoDB Catalog and the S3
FileIO. |
Review Comment:
The order is different here. Can we first do `arn`, and then
`role-session-name`?
I've checked against the Java implementation, and there we use
`client.assume-role.arn` and `client.assume-role.session-name`. Can we use the
same keys here? This way when this information is supplied through a catalog,
then it works for both.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
