โ05-04-2023 01:58 AM
I am going to use the newly released DLT with UC.
But it keeps getting access denied. As I keep tracking the reasons, it seems that an account. ID other than my account ID or Databricks account ID is being requested.
I cannot use '*' in principal attribute aws in sqs access policy for security reasons.
I want to know how to track another account ID.
โ05-04-2023 02:27 AM
Every service on AWS, an SQS queue, and all the other services in your stack using that queue will be configured with minimal permissions, leading to access issues. So, make sure you get your IAM policies set up correctly before deploying to production
โ05-04-2023 02:27 AM
initialize the SDK with an account set up with the required SQS permissions. You can do so in the IAM console
โ05-04-2023 02:27 AM
Every service on AWS, an SQS queue, and all the other services in your stack using that queue will be configured with minimal permissions, leading to access issues. So, make sure you get your IAM policies set up correctly before deploying to production
โ05-07-2023 06:25 PM
Dlt sqs streaming works fine if I don't use the Unity catalog. I don't think it's IAM policies problem
โ05-02-2024 10:47 AM
@185369 Did you solve this issue ? Could you please share some details ?
Passionate about hosting events and connecting people? Help us grow a vibrant local communityโsign up today to get started!
Sign Up Now