An ID and secret key for authentication. For extra security, do not store credentials in the database; use ALTER SESSION…SET PARAMETER to set this value for the current session only. If you use a shared credential, you can set it in the database with ALTER DATABASE…SET PARAMETER. For example:

=> ALTER SESSION SET AWSAuth='ID:secret';

AWS calls these AccessKeyID and SecretAccessKey.

To use admintools create_db or revive_db for Eon Mode on-premises, create a configuration file called auth_params.conf with these settings:

awsauth = key:secret
awsendpoint = IP:port

The file name of the TLS server certificate bundle to use. You must set a value when installing a CA certificate on a SUSE Linux Enterprise Server. For example:

=> ALTER DATABASE DEFAULT SET AWSCAFile = '/etc/ssl/ca-bundle.pem';

Default: system-dependent

The path Vertica uses to look up TLS server certificates. You must set a value when installing a CA certificate on a SUSE Linux Enterprise Server. For example:

=> ALTER DATABASE DEFAULT SET AWSCAPath = '/etc/ssl/';

Default: system-dependent

Specifies whether to use the HTTPS protocol when connecting to S3, can be set only at the database level with ALTER DATABASE…SET PARAMETER. If you choose not to use TLS, this parameter must be set to 0.

Default: 1 (enabled)

The endpoint to use when interpreting S3 URLs, set as follows:

• AWS: Hostname or IP address:port number.

  Do not include http(s)://

• On-premises/Pure: IP address of the Pure Storage server. If using admintools create_db or revive_db, create configuration file auth_params.conf and include these settings:

  awsauth = key:secret
  awsendpoint = IP:port

• When AWSEndpoint is not set, the default behavior is to use virtual-hosted request URLs.

Default: s3.amazonaws.com

The log level, one of the following:

• OFF
• FATAL
• ERROR
• WARN
• INFO
• DEBUG
• TRACE

Default: ERROR

The AWS region containing the S3 bucket from which to read files. This parameter can only be configured with one region at a time. If you need to access buckets in multiple regions, change the parameter each time you change regions.

If you do not set the correct region, you might experience a delay before queries fail because Vertica retries several times before giving up.

Default: us-east-1

A temporary security token generated by running the get-session-token command, which generates temporary credentials you can use to configure multi-factor authentication.

Whether to rewrite S3 URLs to use virtual-hosted paths. For example, if you use AWS, the S3 URLs change to bucketname.s3.amazonaws.com instead of s3.amazonaws.com/bucketname. This configuration setting takes effect only when you have specified a value for AWSEndpoint.

The value of this parameter does not affect how you specify S3 paths.

Default: 0 (disabled)

Controls the number of connections to the communal storage that Vertica uses for streaming reads. In a cloud environment, this setting helps prevent streaming data from communal storage using up all available file handles. It leaves some file handles available for other communal storage operations.

Due to the low latency of on-premises object stores, this option is unnecessary for an Eon Mode database that uses on-premises communal storage, such as Pure Storage and MinIO. In this case, disable the parameter by setting it to 0.