Integration Guide

10.4.1
- 10.5.5
- 10.5.4.1
- 10.5.4
- 10.5.3
- 10.5.2
- 10.5.1
- 10.5
- 10.4.0
- 10.2.2 HotFix 1
- 10.2.2 Service Pack 1
- 10.2.2
- 10.2.1

Back Next

Step 2. Configure a Policy for the Target S3 Bucket

Configure the target S3 bucket with a policy that includes account, role, and the bucket name.

You can create a new policy, or add to an existing policy.

Copy the following statement:

{
 "Sid": "AWS Databricks Policy for s3 bucket - put, get, delete",
 "Effect": "Allow",
 "Principal": {
 "AWS": "arn:aws:iam::<aws-account-id-databricks>:role/<iam-role-for-s3-access>"
 },
 "Action": [
 "s3:PutObject",
 "s3:GetObject",
 "s3:DeleteObject"
 ],
 "Resource": "arn:aws:s3:::<s3-bucket-name>/*"
 },
 {
 "Sid": "AWS Databricks Policy for s3 bucket - list, get bucket location",
 "Effect": "Allow",
 "Principal": {
 "AWS": "arn:aws:iam::<aws-account-id-databricks>:role/<iam-role-for-s3-access>"
 },
 "Action": [
 "s3:ListBucket",
 "s3:GetBucketLocation"
 ],
 "Resource": "arn:aws:s3:::<s3-bucket-name>"
 }

Configure the following elements in the statement:

Element	Description
aws-account-id-databricks	Account ID of the AWS account in which you are configuring this integration.
iam-role-for-s3-access	The IAM role that you created in Create an IAM Role and Policy to Access an S3 Bucket.
s3-bucket-name	S3 bucket name.