Skip to content

[Backport] Add sessionToken support for S3InputSource#18646

Merged
cecemei merged 1 commit intoapache:35.0.0from
cecemei:backport-18609-to-35.0.0
Oct 17, 2025
Merged

[Backport] Add sessionToken support for S3InputSource#18646
cecemei merged 1 commit intoapache:35.0.0from
cecemei:backport-18609-to-35.0.0

Conversation

@cecemei
Copy link
Copy Markdown
Contributor

@cecemei cecemei commented Oct 16, 2025

Backport of #18609 to 35.0.0.

Allows Druid to use an AWS_SESSION_TOKEN (and skip assuming a role to fetch a token) if provided in the spec. No explicit assumptions are made with the input (e.g. that adding sessionToken and assumeRoleAre are mutually exclusive).

This support falls in line with how other engines use things like external catalogs, etc. to vend temporary credentials to access S3, while leaving things like the exact ARN opaque to the caller.
@github-actions github-actions Bot added Area - Documentation Area - Batch Ingestion Backport Area - MSQ For multi stage queries - https://github.com/apache/druid/issues/12262 labels Oct 16, 2025
@jtuglu1 jtuglu1 self-requested a review October 16, 2025 23:35
Copy link
Copy Markdown
Contributor

@jtuglu1 jtuglu1 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you!

@cecemei cecemei merged commit 7b0ed73 into apache:35.0.0 Oct 17, 2025
203 of 206 checks passed
@cecemei cecemei added this to the 35.0.0 milestone Oct 21, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Area - Batch Ingestion Area - Documentation Area - MSQ For multi stage queries - https://github.com/apache/druid/issues/12262 Backport

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants