Amazon S3 Tables

​

Before you start

• Have your S3 Tables bucket ARN ready (format: arn:aws:s3tables:<region>:<account>:bucket/<bucket-name>).
• Have an IAM role (cross-account or same-account) with read permissions on the bucket - see IAM permissions below.
• For Serverless, complete the AWS Serverless setup so e6data has a path to assume your role.

​

Connect to S3 Tables

1. Navigate to the Catalogs section from the sidebar and click Create Catalog.
2. Enter a Catalog Name. Lowercase letters, numbers, and hyphens are recommended (for example, prod-s3-tables).
3. Select Catalog Type as AWS S3 Tables.
4. (Optional) Enable Governance. Apply fine-grained access control via Ranger, OPA, or Lake Formation.
5. Provide the S3 Tables connection details:

   Field	Description
   Region	AWS region where the S3 Tables bucket lives (for example, us-east-1)
   Bucket ARN	Full ARN of the S3 Tables bucket
   IAM Role ARN	Role e6data assumes to access the bucket
   External ID	(Optional) External ID for cross-account assumption

6. (Optional) Enable Cross-Account Access if the bucket is in a different AWS account from where e6data is set up. The Role ARN should target the role in the data-owning account; e6data’s identity must be allowed to assume it.
7. Click Test Connection to verify connectivity. The test confirms the role can be assumed, the bucket is reachable, and e6data can list namespaces.
8. After a successful test, select namespaces to expose. Each namespace contains tables that become queryable.
9. Click Create Catalog.

​

IAM permissions

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "s3tables:GetTableBucket",
        "s3tables:ListNamespaces",
        "s3tables:GetNamespace",
        "s3tables:ListTables",
        "s3tables:GetTable",
        "s3tables:GetTableMetadataLocation",
        "s3tables:GetTableData"
      ],
      "Resource": [
        "arn:aws:s3tables:<region>:<account>:bucket/<bucket-name>",
        "arn:aws:s3tables:<region>:<account>:bucket/<bucket-name>/*"
      ]
    }
  ]
}

​

Edit an S3 Tables catalog

1. Open the Catalogs page in the Compute Plane.
2. Find the S3 Tables catalog, click the row actions (⋮), and click Edit.
3. Update what you need - selected namespaces, IAM Role ARN, External ID, or Governance settings.
4. Click Test Connection if you changed the role or external ID.
5. Click Update Catalog.

​

Delete an S3 Tables catalog

1. Open the Catalogs page, find the catalog, click the row actions (⋮), and click Delete. Confirm.

​

See also

• Catalogs overview
• Cross-account access
• Iceberg REST Catalog - for non-S3-Tables Iceberg catalogs