tokoko opened a new issue, #3196:
URL: https://github.com/apache/polaris/issues/3196

   ### Is your feature request related to a problem? Please describe.
   
   We are trying to monitor how different principals use the catalog. While 
Polaris listeners enable us to audit table reads on table level, we also need 
information regarding physical storage reads for each principal, for example to 
keep track of the s3 costs incurred by each. This seems to be impossible at the 
moment when using vended credentials as all subscoped credentials are produced 
by the same parent role and session name for each subscoped credential is a 
simple hardcoded value - "PolarisAwsCredentialsStorageIntegration".
   
   ### Describe the solution you'd like
   
   It would be ideal to use principal name as part of the session name so that 
the final value would look something like this "Polaris_TestPrincipal" 
(probably best to keep the prefix short as session name length is capped at 64 
chars). This would enable users to use aws monitoring tools like CloudTrail to 
get better information about physical s3 reads.
   
   ### Describe alternatives you've considered
   
   _No response_
   
   ### Additional context
   
   _No response_


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to