From 0f9c88237e3330d67be9a28a5dfde0573dda1d20 Mon Sep 17 00:00:00 2001 From: Rahul Date: Mon, 4 Aug 2025 14:00:45 +0530 Subject: [PATCH] fix: Fixed conditional_consumer_iamroles permisisons for iceberg --- CHANGELOG.md | 4 ++++ templates/apiary-bucket-policy.json | 6 +++++- 2 files changed, 9 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index fc7cd54..5735f59 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -3,6 +3,10 @@ All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/) and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.html). +## [7.11.1] - 2025-08-04 +### Changed +- Fixed conditional_consumer_iamroles permisisons for iceberg. + ## [7.11.0] - 2025-07-17 ### Changed - Add automatic Glue stats collection. diff --git a/templates/apiary-bucket-policy.json b/templates/apiary-bucket-policy.json index a10f360..d9dcaae 100644 --- a/templates/apiary-bucket-policy.json +++ b/templates/apiary-bucket-policy.json @@ -207,7 +207,11 @@ "Sid": "Customer account read access Iceberg metadata files", "Effect": "Allow", "Principal": { - "AWS": [ "${customer_principal}" ] +%{if conditional_consumer_iamroles == ""} + "AWS": [ "${customer_principal}" ] +%{else} + "AWS": [ "${customer_principal}", "${conditional_consumer_iamroles}" ] +%{endif} }, "Action": [ "s3:GetObject",