v.23.12New Feature

Allow Optional Session Token in S3 Table Function

Allow passing optional session token to the s3 table function. #57850 (Shani Elharrar).
Allows passing an optional session token to the s3 table function in ClickHouse.

Why it matters

This feature enables users to provide a session token when accessing data via the s3 table function, improving security and compatibility with temporary AWS credentials such as those generated by AWS STS (Security Token Service). This solves the problem of accessing S3 data secured with temporary tokens that require a session token in addition to access key ID and secret access key.

How to use it

When using the s3 table function, specify the optional session_token parameter along with the existing credentials. For example:

SELECT * FROM s3('https://bucket.s3.amazonaws.com/file.csv', 'AccessKeyId', 'SecretAccessKey', 'SessionToken=your_session_token')