fabio-rizzo-01 commented on code in PR #2802:
URL: https://github.com/apache/polaris/pull/2802#discussion_r2428344334
##########
spec/polaris-management-service.yml:
##########
@@ -1103,6 +1103,10 @@ components:
type: string
description: the aws user arn used to assume the aws role
example: "arn:aws:iam::123456789001:user/abc1-b-self1234"
+ kmsKeyArn:
+ type: string
+ description: the aws kms key arn used to encrypt s3 data
Review Comment:
the key is used by s3 to do encryption of any data in the bucket at rest, so
as long as the IAM role has got the right entitlements on the key everything
will work fine. I don't think anything needs to be changed on the polaris side.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
