how to grant s3 temp permissions when using pyiceberg?

[chengchengpei]

Question

I am looking into https://py.iceberg.apache.org/configuration/#s3.
i tried s3.access-key-id and s3.secret-access-key. they works well. but now, i am thinking how to grant temp permissions.

i am looking into s3.session-token. I have two questions:

1. can i specify s3.session-token only without s3.access-key-id and s3.secret-access-key?
2. how to get the token by aws cli?

I have similar questions about s3.role-arn:
1, how to get this by aws cli?

I know some questions are not relevant to pyiceberg... Any comments welcomed. Thanks

[jayceslesar]

My org uses SSO and we use IAM for cloud runtimes but for local runtimes something like the following:

aws configure export-credentials --profile YOUR_PROFILE_NAME --format env

Will get them into a parseable format