dimas-b commented on code in PR #2711: URL: https://github.com/apache/polaris/pull/2711#discussion_r2392407912
########## CHANGELOG.md: ########## @@ -34,6 +34,11 @@ request adding CHANGELOG notes for breaking (!) changes and possibly other secti - Amazon RDS plugin enabled, this allows polaris to connect to AWS Aurora PostgreSQL using IAM authentication. - The EclipseLink Persistence implementation has been deprecated since 1.0.0 and will be completely removed in 1.3.0 or in 2.0.0 (whichever happens earlier). +- Client requests for vended credentials will fail by default if no credentials are available (they used to return + no credentials). This can happen with FILE and S3 storage that does not have STS. Clients should normally be updated Review Comment: Admins sometimes put restrictions on various policies / permissions even in AWS where STS endpoints are available. Clients should not request vended credentials when they are known to be unavailable. The extra check is basically to make this kind of error more visible, I guess. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
