org.apache.hadoop.fs.s3a.auth.delegation

Interface AWSPolicyProvider

All Known Subinterfaces:

DelegationOperations

All Known Implementing Classes:

S3AFileSystem

public interface AWSPolicyProvider

Interface for providers of AWS policy for accessing data. This is used when building up the role permissions for a delegation token. The permissions requested are from the perspective of S3A filesystem operations on the data, not the simpler model of "permissions on the the remote service". As an example, AWS-KMS encryption permissions must also be requested.

Nested Class Summary

Nested Classes

Modifier and Type	Interface and Description
static class	AWSPolicyProvider.AccessLevel Access levels.

Method Summary

Modifier and Type	Method and Description
List<RoleModel.Statement>	listAWSPolicyRules(Set<AWSPolicyProvider.AccessLevel> access) Get the AWS policy statements required for accessing this service.

Method Detail

listAWSPolicyRules

List<RoleModel.Statement> listAWSPolicyRules(Set<AWSPolicyProvider.AccessLevel> access)

Get the AWS policy statements required for accessing this service.

Parameters:

access - access level desired.

Returns:

a possibly empty list of statements to grant access at that level.