Instance Profiles Do Not Work with Delta Live Tables Default Cluster Policy Access Mode "Shared"

[jaredrohe]

Hello,

I am attempting to configure Autoloader in File Notification mode with Delta Live Tables. I configured an instance profile, but it is not working because I immediately get AWS access denied errors. This is the same issue that is referenced here 

After a bunch of debugging, I've determined that the issue is caused by the "Access Mode" being set to "Shared".

To test this, I created a new compute cluster with the correct instance profile and Access Mode set to "No Isolation Shared". I then connected to that computer cluster in a Python Notebook and I had no problem making AWS API calls through boto3.

I then ran this same experiment with another compute cluster, but this time with the Access Mode set to "Shared". I double checked that the instance profile was configured properly. This time when I connected to the compute cluster via a Python Notebook, all of my AWS commands failed with "invalid credentials" errors.

The only difference between the two consecutive tests was the Access Mode.

Therefore, it appears that Delta Live Tables need to be configured with a Cluster Policy containing an Access Mode of "No isolation Shared". However, that does not seem possible.

I've tried to update the `data_security_mode` JSON property when creating a new cluster policy. However, I then am faced with a validation error when refreshing my Delta Live Table which says that the `data_security_mode` key is not supported.

Is there a way to give the Delta Live Tables access to instance profiles?

Thanks so much for your time!
-Jared

[jaredrohe]

Hey @Retired_mod , thanks for the response. 

My original question was not concerning how to configure instance profiles.  I was able to do that successfully. 

The problem is that when a cluster runs with an instance profile, the access mode is essential for the instance profile to take effect.

If the cluster runs with Access Mode "No isolation shared", then everything works.

However, if the cluster runs with "Shared" (which is the default for Delta Live Tables) then it does not work.  The instance profile does not take effect.

Does the problem make sense @Retired_mod ?

[djhs]

Hi, I'm running into the same issue. Was this solved?

[Babu_Krishnan]

We are running into same issue, was this resolved ?

[jaredrohe]

Unfortunately, I never got this to work.

[AcrobaticMonkey]

Same issue here, the instance profile works fine for both No isolation and single access mode but not for shared 😕