search

awslabs / mountpoint-s3

A simple, high-throughput file client for mounting an Amazon S3 bucket as a local file system.
Apache License 2.0
4.48k stars 154 forks source link

Write Only - IAM access permissions #602

Open zlatan-amazon opened 10 months ago

zlatan-amazon commented 10 months ago

Tell us more about this new feature.

Write only permissions are needed for several security use cases (without the necessary GET/LIST permissions). Instance storing data through mountpoint should only have write only permissions, since reads will be done through a separate service(s).

ahmarsuhail commented 10 months ago

Hey, thank you for the feature request! We can see the value in supporting this use case.

For context: to implement mutating operations like creating a new file or deleting a file, Mountpoint will first check for the existence of a file in order to return appropriate filesystem errors: for example, “No such file or directory” when deleting files or “File already exists” when creating them. To implement this, Mountpoint relies on S3 APIs HeadObject (GetObject permission) and ListObjectsV2.