org.apache.hadoop.fs.s3a.audit

Interface AuditManagerS3A

All Superinterfaces:

org.apache.hadoop.fs.store.audit.ActiveThreadSpanSource<AuditSpanS3A>, org.apache.hadoop.fs.store.audit.AuditSpanSource<AuditSpanS3A>, AutoCloseable, AWSAuditEventCallbacks, Closeable, org.apache.hadoop.service.Service

All Known Implementing Classes:

ActiveAuditManagerS3A, NoopAuditManagerS3A

@InterfaceAudience.Private
public interface AuditManagerS3A
extends org.apache.hadoop.service.Service, org.apache.hadoop.fs.store.audit.AuditSpanSource<AuditSpanS3A>, AWSAuditEventCallbacks, org.apache.hadoop.fs.store.audit.ActiveThreadSpanSource<AuditSpanS3A>

Interface for Audit Managers auditing operations through the AWS libraries. The Audit Manager is the binding between S3AFS and the instantiated plugin point -it adds:

1. per-thread tracking of audit spans
2. The wiring up to the AWS SDK
3. State change tracking for copy operations (does not address issue)

Nested Class Summary

Nested classes/interfaces inherited from interface org.apache.hadoop.service.Service

org.apache.hadoop.service.Service.STATE

Method Summary

Modifier and Type	Method and Description
boolean	checkAccess(org.apache.hadoop.fs.Path path, S3AFileStatus status, org.apache.hadoop.fs.permission.FsAction mode) Check for permission to access a path.
List<com.amazonaws.handlers.RequestHandler2>	createRequestHandlers() Create the request handler(s) for this audit service.
com.amazonaws.services.s3.transfer.internal.TransferStateChangeListener	createStateChangeListener() Return a transfer state change callback which fixes the active span context to be that in which the state change listener was created.
OperationAuditor	getAuditor() Get the auditor; valid once initialized.

Methods inherited from interface org.apache.hadoop.service.Service

close, getBlockers, getConfig, getFailureCause, getFailureState, getLifecycleHistory, getName, getServiceState, getStartTime, init, isInState, registerServiceListener, start, stop, unregisterServiceListener, waitForServiceToStop

Methods inherited from interface org.apache.hadoop.fs.store.audit.AuditSpanSource

createSpan

Methods inherited from interface org.apache.hadoop.fs.s3a.audit.AWSAuditEventCallbacks

afterAttempt, afterError, afterResponse, beforeAttempt, beforeExecution, beforeMarshalling, beforeRequest, beforeUnmarshalling, getOperationName, getSpanId, requestCreated

Methods inherited from interface org.apache.hadoop.fs.store.audit.ActiveThreadSpanSource

getActiveAuditSpan

Method Detail

getAuditor

OperationAuditor getAuditor()

Get the auditor; valid once initialized.

Returns:

the auditor.

createRequestHandlers

List<com.amazonaws.handlers.RequestHandler2> createRequestHandlers()
                                                            throws IOException

Create the request handler(s) for this audit service. The list returned is mutable; new handlers may be added.

Returns:

list of handlers for the SDK.

Throws:

IOException - failure.

createStateChangeListener

com.amazonaws.services.s3.transfer.internal.TransferStateChangeListener createStateChangeListener()

Return a transfer state change callback which fixes the active span context to be that in which the state change listener was created. This can be used to audit the creation of the multipart upload initiation request which the transfer manager makes when a file to be copied is split up. This must be invoked/used within the active span.

Returns:

a state change listener.

checkAccess

boolean checkAccess(org.apache.hadoop.fs.Path path,
                    S3AFileStatus status,
                    org.apache.hadoop.fs.permission.FsAction mode)
             throws IOException

Check for permission to access a path. The path is fully qualified and the status is the status of the path. This is called from the FileSystem.access() command and is a soft permission check used by Hive.

Parameters:

path - path to check

status - status of the path.

mode - access mode.

Returns:

true if access is allowed.

Throws:

IOException - failure