This message was deleted.
# general
s
This message was deleted.
s
I see this note:
Copy code
Cluster to deep storage:

Druid does not make assumptions about the security for deep storage. It follows the system's native security policies to authenticate and authorize with deep storage.
p
authorization for deep storage depends on deep storage, druid acts as client. Users access is another auth system completly independet
If the access control is not passed down when writing to s3, then it opens up a gate for engines like Trino or Presto to download and query the segments which bypasses the restricted access that Druid provided on the data in the datasource.
Yes, you need to make sure, that only druid have access to deep storage resources