tokoko commented on issue #3196:
URL: https://github.com/apache/polaris/issues/3196#issuecomment-3617879948

   @adnanhemani I can take a stab at it myself, have been meaning to 
familiarize myself with the codebase anyway, thanks for the offer. I'll put 
together a draft PR for now and change it accordingly depending on how 3170 
progresses.
   
   > I looked into some other ways of injecting the principal information 
directly into `AwsCredentialsStorageIntegration` but I don't exactly see a 
workable path
   
   Even if there is one,  I think `StorageAccessConfigProvider` is probably 
still a better starting point. You'd need PolarisPrincipal to be part of the 
cache key in `storageCredentialCache.getOrGenerateSubScopeCreds` call. 
Otherwise, credentials generated for one principal might get "leaked" to 
another.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to