Skip to content

Support cross-region reads from S3 via S3 client#6083

Merged
dlvenable merged 1 commit intoopensearch-project:mainfrom
dlvenable:4470-cross-region-s3
Sep 15, 2025
Merged

Support cross-region reads from S3 via S3 client#6083
dlvenable merged 1 commit intoopensearch-project:mainfrom
dlvenable:4470-cross-region-s3

Conversation

@dlvenable
Copy link
Copy Markdown
Member

Description

Enables cross-region support for the s3 source, both for SQS and scan. This is enabled by enabling the crossRegionAccessEnabled flag on the S3 client.

Issues Resolved

Resolves #4470
Resolves #4811

Check List

  • New functionality includes testing.
  • New functionality has a documentation issue. Please link to it in this PR.
    • New functionality has javadoc added
  • Commits are signed with a real name per the DCO

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

…port for cross-region access. Resolves opensearch-project#4470. Resolves opensearch-project#4811.

Signed-off-by: David Venable <dlv@amazon.com>
Copy link
Copy Markdown
Collaborator

@san81 san81 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Always enabling is good but just wondering if it has any side effects. Otherwise 👍

@dlvenable
Copy link
Copy Markdown
Member Author

Always enabling is good but just wondering if it has any side effects. Otherwise 👍

The side effect is that users in the community will be able to get from buckets in other S3 regions even if they don't want it. I think this should not be a concern.

I looked into the authentication approach and it doesn't make multiple STS calls. It uses only the one STS session and uses that in different regions. I also verified this using the AWS SDK request logging.

Also, it caches the bucket to region mapping so it only makes two requests once.

@dlvenable dlvenable merged commit d5c3b6c into opensearch-project:main Sep 15, 2025
50 of 55 checks passed
@dlvenable dlvenable deleted the 4470-cross-region-s3 branch October 13, 2025 19:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Support s3 scan for bucket across regions S3 source - allow cross region access

4 participants