AWS Parameters

Use the following parameters to configure reading from S3 using COPY FROM. For more information about reading data from S3, see Specifying COPY FROM Options.

For the parameters to control the AWS Library (UDSource), see Configure the Vertica Library for Amazon Web Services.

Using ALTER SESSION to change these parameters also changes the corresponding parameters for the AWS Library (UDSource).

Parameter Description
AWSAuth

An ID and secret key to authenticate to AWS. (AWS calls these AccessKeyID and SecretAccessKey.) For extra security, do not store credentials in the database; use ALTER SESSION to set this value for the current session only. (If you use a shared credential, you can set it in the database with SET_CONFIG_PARAMETER.)

Example:

=> ALTER SESSION SET AWSAuth='ID:secret';
AWSCAFile

The file name of the SSL server certificate bundle to use. For SUSE Linux you must set a value.

Default value: system-dependent

AWSCAPath

The path Vertica uses to look up SSL server certificates. For SUSE Linux you must set a value.

Default value: system-dependent

AWSEnableHttps

Whether to use the HTTPS protocol when connecting to S3.

Default value: 1 (enabled)

AWSEndpoint

The AWS endpoint to use when interpreting S3 URLs.

To set the endpoint in AWS, do not include http(s)://. Use only the host name or the IP address:port number.

Default value: s3.amazonaws.com

AWSLogLevel

The log level for AWS components

Default Value: ERROR

Valid values:

  • OFF
  • FATAL
  • ERROR
  • WARN
  • INFO
  • DEBUG
  • TRACE

AWSRegion

The region containing the S3 bucket from which to read files. AWSRegion can only be configured with one region at a time. If you need to access buckets in multiple regions, change the parameter each time you change regions.

If you do not set the correct region, you might experience a delay before queries fail because Vertica retries several times before giving up.

Default value: us-east-1

You can find more information about AWS regions in the Amazon Documentation.

AWSSessionToken

The AWS temporary security token generated by running the AWS STS command get-session-token. The AWS STS command generates temporary credentials you can use to implement multi-factor authentication for security purposes.

If you use session tokens, you must set all AWS parameters at the session level, even if some of them are set at the database level. Use ALTER SESSION to set session parameters.

Default value: no default.