S3 Parameters

Use the following parameters to configure reading from S3 file systems and on-premises storage with S3-compatible APIs, such as Pure Storage, using COPY FROM. For more information about reading data from S3, see Specifying Where to Load Data From.

For the parameters to control the AWS Library (UDSource), see Configure the Vertica Library for Amazon Web Services.

When using AWS, using ALTER SESSION to change these parameters also changes the corresponding parameters for the AWS Library (UDSource).

Query system table CONFIGURATION_PARAMETERS to determine what levels (node, session, user, database) are valid for a given parameter.

Parameter Description

An ID and secret key for authentication. For extra security, do not store credentials in the database; use ALTER SESSION…SET PARAMETER to set this value for the current session only. If you use a shared credential, you can set it in the database with ALTER DATABASE…SET PARAMETER. For example:


AWS calls these AccessKeyID and SecretAccessKey.

To use admintools create_db or revive_db for Eon Mode on-premises, create a configuration file called auth_params.conf with these settings:

awsauth = key:secret
awsendpoint = IP:port

The file name of the TLS server certificate bundle to use. You must set a value when installing a CA certificate on a SUSE Linux Enterprise Server. For example:

=> ALTER DATABASE DEFAULT SET AWSCAFile = '/etc/ssl/ca-bundle.pem';

Default: system-dependent


The path Vertica uses to look up TLS server certificates. You must set a value when installing a CA certificate on a SUSE Linux Enterprise Server. For example:


Default: system-dependent


Specifies whether to use the HTTPS protocol when connecting to S3, can be set only at the database level with ALTER DATABASE…SET PARAMETER. If you choose not to use TLS, this parameter must be set to 0.

Default: 1 (enabled)


The endpoint to use when interpreting S3 URLs, set as follows:

  • AWS: Hostname or IP address:port number.

    Do not include http(s)://

  • On-premises/Pure: IP address of the Pure Storage server. If using admintools create_db or revive_db, create configuration file auth_params.conf and include these settings:
    awsauth = key:secret
    awsendpoint = IP:port
  • When AWSEndpoint is not set, the default behavior is to use virtual-hosted request URLs.

Default: s3.amazonaws.com


The log level, one of the following:

  • OFF
  • WARN
  • INFO

Default: ERROR


The AWS region containing the S3 bucket from which to read files. This parameter can only be configured with one region at a time. If you need to access buckets in multiple regions, change the parameter each time you change regions.

If you do not set the correct region, you might experience a delay before queries fail because Vertica retries several times before giving up.

Default: us-east-1


A temporary security token generated by running the get-session-token command, which generates temporary credentials you can use to configure multi-factor authentication.

If you use session tokens, you must set all parameters at the session level, even if some of them are set at the database level. Use ALTER SESSION to set session parameters.


Whether to rewrite S3 URLs to use virtual-hosted paths. For example, if you use AWS, the S3 URLs change to bucketname.s3.amazonaws.com instead of s3.amazonaws.com/bucketname. This configuration setting takes effect only when you have specified a value for AWSEndpoint.

The value of this parameter does not affect how you specify S3 paths.

Default: 0 (disabled)

As of September 30, 2020, AWS requires virtual address paths for newly created buckets.


Controls the number of connections to the communal storage that Vertica uses for streaming reads. In a cloud environment, this setting helps prevent streaming data from communal storage using up all available file handles. It leaves some file handles available for other communal storage operations.

Due to the low latency of on-premises object stores, this option is unnecessary for an Eon Mode database that uses on-premises communal storage, such as Pure Storage and MinIO. In this case, disable the parameter by setting it to 0.