[I] Implement validateAccessToLocations for S3 Tables storage integration [polaris]

["aritragster (via GitHub)" <gi...@apache.org>]

aritragster opened a new issue, #4302:
URL: https://github.com/apache/polaris/issues/4302

   ### Is your feature request related to a problem? Please describe.
   
   ## Summary
   
   `AwsS3TablesCredentialsStorageIntegration.validateAccessToLocations()` currently returns an empty map (no-op). This method is called during catalog creation to verify that the configured IAM role can actually access the storage locations. For S3 Tables, this would mean verifying the role can reach the table bucket ARN.
   
   ## Context
   
   The S3 Tables credential vending integration is being added in PR #4052. The `validateAccessToLocations` stub was intentionally deferred because:
   - S3 Tables uses ARN-based resources, not path-based, and the existing S3 validation logic (which does a test `GetObject`/`PutObject`) doesn't apply
   - Validation would likely require calling `s3tables:GetTableBucket` or `sts:AssumeRole` with a test policy to confirm access
   - The scope of validation needs design discussion (validate at catalog creation? at first loadTable? both?)
   
   ## Acceptance Criteria
   
   - [ ] When a catalog with `StorageType.S3_TABLES` is created, validate that the configured role ARN can be assumed and has access to the table bucket ARN
   - [ ] Return meaningful validation results (not empty map) so catalog creation fails fast on misconfiguration
   - [ ] Add unit tests for validation success and failure cases
   
   ## Related
   
   - PR #4052 (S3 Tables credential vending)
   - Issue #577 (S3 Tables integration)
   
   
   ### Describe the solution you'd like
   
   _No response_
   
   ### Describe alternatives you've considered
   
   _No response_
   
   ### Additional context
   
   _No response_


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [I] Implement validateAccessToLocations for S3 Tables storage integration [polaris]

["github-actions[bot] (via GitHub)" <gi...@apache.org>]

github-actions[bot] commented on issue #4302:
URL: https://github.com/apache/polaris/issues/4302#issuecomment-4560272258

   This issue is stale because it has been open 30 days with no activity. Remove stale label or comment if you think it's still relevant.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org