Revanth14 commented on issue #2181: URL: https://github.com/apache/iceberg-go/issues/2181#issuecomment-6498480040
Thanks for reply @zeroshade Agreed on layering, so I'd flip plan-scoped IO to match the table-wide sites rather than the other way round. One case I'd keep: an STS session token is bound to the key it was issued with, so when a vended S3 key pair arrives without a token, a base `s3.session-token` can only turn it into a 403. I'd drop just that token (and its expiry) in `mergeVendedCredentials`, the same way a vended `adls.token` already drops the credentials that shadow it. Does that work for you? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
