Restrict Access to External Object Storage | NOS | VantageCloud Lake - Controlling Access with an AUTHORIZATION Object - Teradata VantageCloud Lake

Lake - Manage and Move Data

Deployment
VantageCloud
Edition
Lake
Product
Teradata VantageCloud Lake
Release Number
Published
February 2025
ft:locale
en-US
ft:lastEdition
2025-05-16
dita:mapPath
atx1683670417382.ditamap
dita:ditavalPath
pny1626732985837.ditaval
dita:id
atx1683670417382

An authorization object is used to control who can access external object storage.

Before creating the authorization object Analytics Database must have permission from the external object storage to access the data. The credentials are configured on the external object storage that you want to access. For example, to access an Amazon S3 bucket an Access Key ID or an AWS Identity and Access Management (IAM) user credential is required, depending on your external object storage. See Authentication for External Object Storage for required credentials for the external object storage.

Once your external object storage allows Analytics Database to access it, set up an authorization object with the credentials for your external object storage.

Public buckets or containers in external object storage do not require credentials for access. To access a public bucket or container, put an empty string between the straight quotes for USER and PASSWORD.