Hi, Thomas I am not an expert of s3 but I think Flinkneed write/read/delete(maybe list) permission of the path(bucket). BTW, What error did you encounter?
Best, Guowei On Fri, Sep 24, 2021 at 5:00 AM Thomas Wang <w...@datability.io> wrote: > Hi, > > I'm trying to figure out what exact s3 permissions does a flink job need > to work appropriately when using s3 for checkpointing. Currently, I have > the following IAM Policy, but it seems insufficient. Can anyone help me > figure this out? Thanks. > > { > Action = [ > "s3:PutObject", > "s3:GetObject", > ] > Effect = "Allow" > Resource = "arn:aws:s3:::<BUCKET_NAME>/<SOME_PATH>/*" > }, > > Thomas >