You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@polaris.apache.org by "dimas-b (via GitHub)" <gi...@apache.org> on 2026/08/10 17:34:08 UTC
Re: [PR] Add decrypt only access for legacy AWS KMS keys [polaris]
dimas-b commented on code in PR #5162:
URL: https://github.com/apache/polaris/pull/5162#discussion_r3751870416
##########
spec/polaris-management-service.yml:
##########
@@ -1142,11 +1142,18 @@ components:
example: "arn:aws:iam::123456789001:user/abc1-b-self1234"
currentKmsKey:
type: string
- description: the aws kms key arn used to encrypt s3 data
+ deprecated: true
+ description: Deprecated. Use allowedKmsKeys instead. The aws kms key arn used to encrypt and decrypt s3 data.
example: "arn:aws:kms::123456789001:key/01234578"
allowedKmsKeys:
type: array
- description: The list of kms keys that this catalog and its clients are allowed to use for reading s3 data
+ description: The list of kms keys that this catalog and its clients are allowed to use for encrypting and decrypting s3 data
+ items:
+ type: string
+ example: ["arn:aws:kms::123456789001:key/01234578"]
+ legacyKmsKeys:
Review Comment:
`decryptOnlyKmsKeys` SGTM... or perhaps `reeadOnlyKmsKeys`
##########
spec/polaris-management-service.yml:
##########
@@ -1142,11 +1142,18 @@ components:
example: "arn:aws:iam::123456789001:user/abc1-b-self1234"
currentKmsKey:
type: string
- description: the aws kms key arn used to encrypt s3 data
+ deprecated: true
+ description: Deprecated. Use allowedKmsKeys instead. The aws kms key arn used to encrypt and decrypt s3 data.
example: "arn:aws:kms::123456789001:key/01234578"
allowedKmsKeys:
type: array
- description: The list of kms keys that this catalog and its clients are allowed to use for reading s3 data
+ description: The list of kms keys that this catalog and its clients are allowed to use for encrypting and decrypting s3 data
+ items:
+ type: string
+ example: ["arn:aws:kms::123456789001:key/01234578"]
+ legacyKmsKeys:
Review Comment:
`decryptOnlyKmsKeys` SGTM... or perhaps `readOnlyKmsKeys`
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org