Most likely this is a Free Edition storage limitation rather than a bug, and your Postgres-side setup sounds correct. Lakebase CDF writes its destination as a Unity Catalog managed Delta table, and the Lakebase CDF docs list catalogs backed by defaul...
Your read is right, and fair point on the allowlist: editing network policies is part of serverless egress control, which is an Enterprise capability, so on Premium the propagation window is the path.
Your timing hypothesis matches how this works int...
Nice debugging, that error string settles it: the denial is coming from the serverless egress layer, not AWS, and the auto-created vs manual split is the tell. Serverless auto-allows a bucket only when the external location is bound to the workspace ...
No, you don't need the Enterprise plan for this. Serverless reads Unity Catalog external locations fine on Premium; Enterprise only comes into play for optional serverless egress control features.
Your trace shows the request is signed and S3 itself ...