FANNG1 opened a new issue, #49356: URL: https://github.com/apache/doris/issues/49356
### Search before asking - [x] I had searched in the [issues](https://github.com/apache/doris/issues?q=is%3Aissue) and found no similar issues. ### Description Some Iceberg REST catalog implementations like `Gravitino` provide credential vending features to manage security information centrally and safely. If user has the right privilege to access the table, IRC server will generate a temporary token to access the underlying storage. Please refer to https://gravitino.apache.org/docs/0.8.0-incubating/security/credential-vending for more details about credential vending in Gravitino. ### Use case After supports credential vending, all security information is managed in Iceberg REST server, which means: 1. user doesn't need to specify AKSK when creating catalogs 2. User could use temporary scoped token to access the data without the risk of leaking the AKSK. ### Related issues _No response_ ### Are you willing to submit PR? - [ ] Yes I am willing to submit a PR! ### Code of Conduct - [x] I agree to follow this project's [Code of Conduct](https://www.apache.org/foundation/policies/conduct) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: commits-unsubscr...@doris.apache.org.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: commits-unsubscr...@doris.apache.org For additional commands, e-mail: commits-h...@doris.apache.org
