Slackbot
09/26/2023, 9:29 PMSamarth Jain
09/26/2023, 9:37 PMCluster to deep storage:
Druid does not make assumptions about the security for deep storage. It follows the system's native security policies to authenticate and authorize with deep storage.Piotr Dołowy
09/26/2023, 9:37 PMPiotr Dołowy
09/26/2023, 9:42 PMIf the access control is not passed down when writing to s3, then it opens up a gate for engines like Trino or Presto to download and query the segments which bypasses the restricted access that Druid provided on the data in the datasource.Yes, you need to make sure, that only druid have access to deep storage resources