hadoop/hadoop-tools/hadoop-aws
Petre Bogdan Stolojan 664075f35d
HADOOP-17198. Support S3 Access Points (#3260)
Add support for S3 Access Points. This provides extra security as it
ensures applications are not working with buckets belong to third parties.

To bind a bucket to an access point, set the access point (ap) ARN,
which must be done for each specific bucket, using the pattern

fs.s3a.bucket.$BUCKET.accesspoint.arn = ARN

* The global/bucket option `fs.s3a.accesspoint.required` to
mandate that buckets must declare their access point.
* This is not compatible with S3Guard.

Consult the documentation for further details.

Contributed by Bogdan Stolojan

(this commit contains the changes to TestArnResource from HADOOP-18068,
 "upgrade AWS SDK to 1.12.132" so that it works with the later SDK.)

Change-Id: I3fac213e52ca6ec1c813effb8496c353964b8e1b
2022-02-04 16:21:35 +00:00
..
dev-support HADOOP-17409. Remove s3guard from S3A module (#3534) 2022-01-18 18:04:48 +00:00
src HADOOP-17198. Support S3 Access Points (#3260) 2022-02-04 16:21:35 +00:00
pom.xml HADOOP-17409. Remove s3guard from S3A module (#3534) 2022-01-18 18:04:48 +00:00