Hi, Thomas

I am not an expert of s3 but I think Flinkneed write/read/delete(maybe
list) permission of the path(bucket).
BTW, What error did you encounter?

Best,
Guowei


On Fri, Sep 24, 2021 at 5:00 AM Thomas Wang <w...@datability.io> wrote:

> Hi,
>
> I'm trying to figure out what exact s3 permissions does a flink job need
> to work appropriately when using s3 for checkpointing. Currently, I have
> the following IAM Policy, but it seems insufficient. Can anyone help me
> figure this out? Thanks.
>
> {
> Action = [
> "s3:PutObject",
> "s3:GetObject",
> ]
> Effect = "Allow"
> Resource = "arn:aws:s3:::<BUCKET_NAME>/<SOME_PATH>/*"
> },
>
> Thomas
>

Reply via email to