Your external object store must be configured to allow Advanced SQL Engine access.
When you configure external storage, you set the credentials that are used in SQL statements by Advanced SQL Engine. The supported credentials for USER and PASSWORD (used in the CREATE AUTHORIZATION command) correspond to the values shown in the following table:
| Platform | USER | PASSWORD |
|---|---|---|
| Amazon S3 | Access Key | Secret Access Key |
| Amazon S3 IAM | AWS Identity and Access Management (IAM) Credentials (roles/policies) | |
| Azure Access Key | Storage Account Name | Key |
| Azure Account Shared Access Signature (SAS) | Storage Account Name | SAS Token |
| Google Cloud Storage (GCS) | Access Key | Secure Email and Secret Access Key |
| Public access object stores | <empty string> Enclose the empty string in single straight quotes: USER '' |
<empty string> Enclose the empty string in single straight quotes: PASSWORD '' |
To see examples of supported credentials, see Variable Substitutions for Examples.