v.25.10Improvement

Mask S3 credentials in logs

Official CH changelog text
Mask S3 credentials in logs when using DATABASE ENGINE = Backup with S3 storage. #85336 (Kenny Sun).
Mask S3 credential information in logs when using the DATABASE ENGINE = Backup with S3 storage backend.

Why it matters

This feature enhances security by preventing sensitive S3 credentials from being exposed in ClickHouse logs. It helps users protect their access keys and secrets when performing backups to S3 storage.

How to use it

No additional configuration is needed. When using DATABASE ENGINE = Backup with S3 storage, ClickHouse will automatically mask S3 credentials in all relevant logs.

Related resources

PreviousNext