MonkeyCanCode opened a new pull request, #1609:
URL: https://github.com/apache/polaris/pull/1609

   We are using a combination of following 3 jars throughout this repo when 
connecting to AWS:
   ```
   org.apache.hadoop:hadoop-aws:3.4.0
   software.amazon.awssdk:bundle:2.23.19
   software.amazon.awssdk:url-connection-client:2.23.19
   ```
   
   Those are great and well documented in 
https://iceberg.apache.org/docs/1.4.0/aws/#enabling-aws-integration. However, 
it can be pretty confusing in my option for people who are not familiar with 
these 3 jars and tried to mitigate a vulnerability by just bump the jar version 
(there are many vulnerabilities for those 3 jars as they are pretty old and 
just change to latest will break as some needed classes got removed in the 
newer version). 
   
   Then for the new examples, we are using 
`,org.apache.iceberg:iceberg-gcp-bundle:1.9.0,org.apache.iceberg:iceberg-azure-bundle:1.9.0`
 already, thus, I think it makes sense to switch from these 3 individual jars 
to `org.apache.iceberg:iceberg-aws-bundle:1.9.0`. 
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to