Table of Contents
Postgres Pro AXE uses secrets to store credentials for connecting to S3 storages, such as MinIO.
All S3 storage operations require a secret, including:
Secrets are stored in Postgres Pro system tables using the Foreign Data Wrapper (FDW) mechanism, which is the standard Postgres Pro method for storing information about external data sources. The key components of this mechanism are:
Foreign server (simple_s3_secret): The object that
stores public S3 storage connection parameters.
User mapping: The object that stores private S3
storage connection parameters for the PUBLIC role.
A secret only provides the technical ability to connect to an S3 storage, whereas the actual access to pgpro_metastore objects in this storage is managed using Postgres Pro AXE privileges (refer to the diagram below).
Figure 23.1. Two-level access management