aws-samples / aws-samples/amazon-managed-service-for-apache-flink-examples
TableAPI example requires S3 sub-folder write permission to work on AWS
- Dominant language
- Java
- Stars
- 91
- Forks
- 47
- PR merge metrics
- No merged PRs in 30d
Description
The S3 permission described in "Edit the IAM policy" section under https://docs.aws.amazon.com/managed-flink/latest/java/gs-table-create.html#gs-table-7
```
{
"Sid": "WriteOutputBucket",
"Effect": "Allow",
"Action": "s3:*",
"Resource": [
"arn:aws:s3:::amzn-s3-demo-bucket2"
]
}
```
This alone doesn't seem to work. I need to add extra line ""arn:aws:s3:::amzn-s3-demo-bucket2/*" for it to work. As in
```
{
"Sid": "WriteOutputBucket",
"Effect": "Allow",
"Action": "s3:*",
"Resource": [
"arn:aws:s3:::amzn-s3-demo-bucket2",
"arn:aws:s3:::amzn-s3-demo-bucket2/*"
]
}
```
Contributor guide
Research direction
Start with the linked AWS Managed Service for Apache Flink guide and its “Edit the IAM policy” section for the TableAPI example. Confirm the output bucket permission needs both the bucket ARN and the ARN with /*, then update the corresponding example guidance and verify that the documented policy supports running the example on AWS.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws, java
- Domain
- cloud, documentation
- Issue type
- Documentation
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100