[
https://issues.apache.org/jira/browse/ARROW-15892?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17503967#comment-17503967
]
Weston Pace commented on ARROW-15892:
-------------------------------------
I think this is one of those things that is just a bit leaky when you have a
filesystem abstraction that covers both local and remote filesystems. The flag
I described above (don't create directories) ought to prevent any buckets from
being created. We could also add a configuration parameter to the S3FileSystem
itself (e.g. "safe mode") that would error out if it were asked to create a
bucket. That would help if the user made a typo for example. I think that
probably belongs in a different JIRA so feel free to open.
> [C++] Dataset APIs require s3:ListBucket Permissions
> ----------------------------------------------------
>
> Key: ARROW-15892
> URL: https://issues.apache.org/jira/browse/ARROW-15892
> Project: Apache Arrow
> Issue Type: Bug
> Components: C++
> Reporter: Jonny Fuller
> Assignee: Weston Pace
> Priority: Minor
>
> Hi team, first time posting an issue so I apologize if the format is lacking.
> My original comment is on ARROW-13685 Github Issue
> [here|https://github.com/apache/arrow/pull/11136#issuecomment-1062406820].
> Long story short, our environment is super locked down, and while my
> application has permission to write data against an s3 prefix, I do not have
> the {{ListBucket}} permission nor can I add it. This does not prevent me from
> using the "individual" file APIs like {{pq.write_table}} but the bucket
> validation logic in the "dataset" APIs breaks when trying to test for the
> bucket's existence.
> {code:java}
> pq.write_to_dataset(pa.Table.from_batches([data]), location,
> filesystem=s3fs){code}
> {code:java}
> OSError: When creating bucket '<my bucket>': AWS Error [code 15]: Access
> Denied{code}
> The same is true for the generic {{pyarrow.dataset}} APIs. My understanding
> is the bucket validation logic is part of the C++ code, not the Python API.
> As a Pythonista who knows nothing of C++ I am not sure how to resolve this
> problem.
>
> Would it be possible to disable the bucket existence check with an optional
> key word argument? Thank you for your time!
>
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
