Re: Interact with different S3 buckets from a shared Flink cluster

2020-06-23 Thread Steven Wu
Internally, we have our own ConfigurableCredentialsProvider. Based on the config in core-site.xml, it does assume-role with the proper IAM credentials using STSAssumeRoleSessionCredentialsProvider. We just need to grant permission for the instance credentials to be able to assume the IAM role for b

Re: Interact with different S3 buckets from a shared Flink cluster

2020-06-22 Thread Arvid Heise
Hi Ricardo, one option is to use s3p for checkpointing (Presto) and s3a for custom applications and attach different configurations. In general, I'd recommend to use a cluster per application to exactly avoid such issues. I'd use K8s and put the respective IAM roles on each application pod (e.g.