"vfs.s3.region" |
"us-east-1" |
The S3 region, if S3 is enabled. |
"vfs.s3.aws_access_key_id" |
"" |
The AWS_ACCESS_KEY_ID . |
"vfs.s3.aws_secret_access_key" |
"" |
The AWS_SECRET_ACCESS_KEY . |
"vfs.s3.aws_session_token" |
"" |
The AWS_SESSION_TOKEN . |
"vfs.s3.aws_role_arn" |
"" |
The role that you want to assume (AWS_ROLE_ARN ). |
"vfs.s3.aws_external_id" |
"" |
Third party access ID to your resources when assuming a role (AWS_EXTERNAL_ID ). |
"vfs.s3.aws_load_frequency" |
"" |
Session time limit when assuming a role (AWS_LOAD_FREQUENCY ). |
"vfs.s3.aws_session_name" |
"" |
(Optional) Session name when assuming a role (AWS_SESSION_NAME ), which you canuuse for tracing and bookkeeping. |
"vfs.s3.scheme" |
"https" |
The S3 scheme (http or https ), if S3 is enabled. |
"vfs.s3.endpoint_override" |
"" |
The S3 endpoint, if S3 is enabled. |
"vfs.s3.use_virtual_addressing" |
true |
The S3 use of virtual addressing (true or false ), if S3 is enabled. |
"vfs.s3.skip_init" |
"false" |
Skip Aws::InitAPI for the S3 layer (true or false ). |
"vfs.s3.use_multipart_upload" |
"true" |
The S3 use of multi-part upload requests (true or false ), if S3 is enabled. |
"vfs.s3.max_parallel_ops" |
The value of sm.io_concurrency_level |
The maximum number of S3 backend parallel operations. |
"vfs.s3.multipart_part_size" |
5242880 (5 MB) |
The part size (in bytes) used in S3 multipart writes. Any uint64_t value is acceptable. Note: vfs.s3.multipart_part_size * vfs.s3.max_parallel_ops bytes will be buffered before issuing multipart uploads in parallel. |
"vfs.s3.ca_file" |
"" |
Path to SSL/TLS certificate file to be used by cURL for S3 HTTPS encryption. Follows cURL conventions. |
"vfs.s3.ca_path" |
"" |
Path to SSL/TLS certificate directory to be used by cURL for S3 HTTPS encryption. Follows cURL conventions. |
"vfs.s3.connect_timeout_ms" |
10800 |
The connection timeout in ms. Any long value is acceptable. |
"vfs.s3.connect_max_tries" |
5 |
The maximum tries for a connection. Any long value is acceptable. |
"vfs.s3.connect_scale_factor" |
25 |
The maximum tries for a connection. Any long value is acceptable. |
"vfs.s3.custom_headers.*" |
Optional. No default. |
(Optional) Prefix for custom headers on s3 requests. For each custom header, use "vfs.s3.custom_headers.header_key" = "header_value" . |
"vfs.s3.logging_level" |
"Off" |
The AWS SDK logging level. This is a process-global setting. The configuration of the most recently constructed context will set process state. Log files are written to the process working directory. |
"vfs.s3.request_timeout_ms" |
3000 |
The request timeout in ms. Any long value is acceptable. |
"vfs.s3.requester_pays" |
false |
Whether the requester pays for the S3 access charges. |
"vfs.s3.proxy_host" |
"" |
The S3 proxy host. |
"vfs.s3.proxy_port" |
0 |
The S3 proxy port. |
"vfs.s3.proxy_scheme" |
"http" |
The S3 proxy scheme. |
"vfs.s3.proxy_username" |
"" |
The S3 proxy username. Note: this parameter is not serialized by tiledb_config_save_to_file . |
"vfs.s3.proxy_password" |
"" |
The S3 proxy password. Note: this parameter is not serialized by tiledb_config_save_to_file . |
"vfs.s3.verify_ssl" |
true |
Enable HTTPS certificate verification. |
"vfs.s3.no_sign_request" |
false |
Make unauthenticated requests to S3. |
"vfs.s3.sse" |
"" |
The server-side encryption algorithm to use. Supported non-empty values are "aes256" and "kms" (AWS Key Management Service). |
"vfs.s3.sse_kms_key_id" |
"" |
The server-side encryption key to use if "vfs.s3.sse" is set to "kms" (AWS Key Management Service). |
"vfs.s3.storage_class" |
"NOT_SET" |
The storage class to use for the newly uploaded S3 objects. The set of accepted values is found in the Aws::S3::Model::StorageClass enumeration but are included here for reference: - "NOT_SET" - "STANDARD" - "REDUCED_REDUNDANCY" - "STANDARD_IA" - "ONEZONE_IA" - "INTELLIGENT_TIERING" - "GLACIER" - "DEEP_ARCHIVE" - "OUTPOSTS" - "GLACIER_IR" - "SNOW" - "EXPRESS_ONEZONE" |
"vfs.s3.bucket_canned_acl" |
"NOT_SET" |
Names of values found in Aws::S3::Model::BucketCannedACL enumeration: - "NOT_SET" - "private_" - "public_read" - "public_read_write" - "authenticated_read" |
"vfs.s3.object_canned_acl" |
"NOT_SET" |
Names of values found in Aws::S3::Model::ObjectCannedACL enumeration (The first 5 are the same as for "vfs.s3.bucket_canned_acl" ): - "NOT_SET" - "private_" - "public_read" - "public_read_write" - "authenticated_read" The following three items are found only in Aws::S3::Model::ObjectCannedACL : - "aws_exec_read" - "owner_read" - "bucket_owner_full_control" |
"vfs.s3.config_source" |
"auto" |
Force S3 SDK to only load config options from a set source. The supported options are as follows: - "auto" (TileDB config options are considered first, then SDK-defined precedence: environment variables, configuration files, EC2 metadata) - config_files (forces SDK to only consider options found in AWS config files) - sts_profile_with_web_identity (force SDK to consider assume roles/STS from config files with support for web tokens, commonly used by EKS/ECS) |
"vfs.s3.install_sigpipe_handler" |
true |
When set to true , the S3 SDK uses a handler that ignores SIGPIPE signals. |