aws-samples / aws-samples/amazon-managed-service-for-apache-flink-examples

TableAPI example requires S3 sub-folder write permission to work on AWS

Open
#166 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
91
Forks
47
PR merge metrics
No merged PRs in 30d

Description

The S3 permission described in "Edit the IAM policy" section under https://docs.aws.amazon.com/managed-flink/latest/java/gs-table-create.html#gs-table-7

```
{
"Sid": "WriteOutputBucket",
"Effect": "Allow",
"Action": "s3:*",
"Resource": [
"arn:aws:s3:::amzn-s3-demo-bucket2"
]
}
```

This alone doesn't seem to work. I need to add extra line ""arn:aws:s3:::amzn-s3-demo-bucket2/*" for it to work. As in

```
{
"Sid": "WriteOutputBucket",
"Effect": "Allow",
"Action": "s3:*",
"Resource": [
"arn:aws:s3:::amzn-s3-demo-bucket2",
"arn:aws:s3:::amzn-s3-demo-bucket2/*"
]
}
```

Contributor guide

Open the contributing guide

Research direction

Start with the linked AWS Managed Service for Apache Flink guide and its “Edit the IAM policy” section for the TableAPI example. Confirm the output bucket permission needs both the bucket ARN and the ARN with /*, then update the corresponding example guidance and verify that the documented policy supports running the example on AWS.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, java
Domain
cloud, documentation
Issue type
Documentation
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.