3519308 - Assume Role in AWS Connection With SAP Datasphere - Why Credentials Are Still Required

Configuring the connection and selecting the "Assume Role" option to TRUE but still prompted to provide access key and secret key credentials.

• SAP Datasphere
• Amazon

• Amazon Security requirement for connections is mandatory. 
• Access Key Enter the access key ID of the user that is used to authenticate to Amazon S3.
• Secret Key Enter the secret access key of the user that is used to authenticate to Amazon S3.

Even though the Assume Role operation gives you temporary security credentials, initially to assume a role, you must define an access key and secret key. This is a mandatory step and essentially these keys are the ones that allow the application or service to make that initial request to assume the role.

In summary, while the Assume Role allows you to use temporary security credentials, to get to that point you still need to provide long term security credentials (access key and secret key) to make the Assume Role request. This is why access and secret keys are still required even when intending to use Assume Role. This initial authentication is necessary to provide a secure connection. 

"These temporary credentials consist of an access key ID, a secret access key, and a security token." Please read:

• AssumeRole.
• Amazon Simple Storage Service Connections.

 "Error while executing type extension..." occurs when validate the connection in Datasphere.

KBA , DS-DI-CON , Connections , Problem