S3 Tables

5 resource kinds. Generated from the operator's CRD schemas.

API Group: aws.konfig.io/v1alpha1

S3TablesNamespace # CLOUD CONTROL · AWS::S3Tables::Namespace

S3TablesNamespace manages AWS::S3Tables::Namespace through the AWS Cloud Control API.

kubectl get s3tablesnamespaces · example on GitHub

Example

# S3TablesNamespace — S3 Tables
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/s3tables.html#s3tablesnamespace
apiVersion: aws.konfig.io/v1alpha1
kind: S3TablesNamespace
metadata:
  name: example-s3tablesnamespace
  namespace: default
spec:
  namespace: example
  providerRef:
    name: example-s3tablesnamespace
    region: us-east-1
  tableBucketARN: arn:aws:iam::123456789012:role/example-role

Spec

Field	Type	Required	Description
`namespace`	string	yes	Create-only in AWS: changing it requires replacing the resource.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`tableBucketARN`	string	yes	Create-only in AWS: changing it requires replacing the resource.

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.

S3TablesTable # CLOUD CONTROL · AWS::S3Tables::Table

S3TablesTable manages AWS::S3Tables::Table through the AWS Cloud Control API.

kubectl get s3tablestables · example on GitHub

Example

# S3TablesTable — S3 Tables
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/s3tables.html#s3tablestable
apiVersion: aws.konfig.io/v1alpha1
kind: S3TablesTable
metadata:
  name: example-s3tablestable
  namespace: default
spec:
  compaction:
    status: enabled
    targetFileSizeMB: 64
  icebergMetadata:
    icebergPartitionSpec:
      fields:
      - fieldId: 1
        name: example-s3tablestable
        sourceId: 1
        transform: example
      specId: 1
    icebergSchema:
      schemaFieldList:
      - id: 1
        name: example-s3tablestable
        required: false
        type: example
    icebergSchemaV2:
      identifierFieldIds:
      - 1
      schemaId: 1
      schemaV2FieldList:
      - doc: example
        id: 1
        name: example-s3tablestable
        required: false
      schemaV2FieldType: struct
    icebergSortOrder:
      fields:
      - direction: asc
        nullOrder: nulls-first
        sourceId: 1
        transform: example
      orderId: 1
    tableProperties:
      key: value
  namespace: example
  openTableFormat: ICEBERG
  providerRef:
    name: example-s3tablestable
    region: us-east-1
  snapshotManagement:
    maxSnapshotAgeHours: 1
    minSnapshotsToKeep: 1
    status: enabled
  storageClassConfiguration:
    storageClass: STANDARD
  tableBucketARN: arn:aws:iam::123456789012:role/example-role
  tableName: example-s3tablestable
  tags:
  - key: example
    value: example
  withoutMetadata: 'Yes'

Spec

Field	Type	Required	Description
`compaction`	object	—	S3TablesTableCompaction is a nested property type of AWS::S3Tables::Table.
`compaction.status`	enum	—	Indicates whether the Compaction maintenance action is enabled. Allowed: `enabled, disabled`
`compaction.targetFileSizeMB`	integer	—	The target file size for the table in MB.
`icebergMetadata`	object	—	Create-only in AWS: changing it requires replacing the resource.
`icebergMetadata.icebergPartitionSpec`	object	—	S3TablesTableIcebergPartitionSpec is a nested property type of AWS::S3Tables::Table.
`icebergMetadata.icebergPartitionSpec.fields`	array<object>	yes	List of partition fields
`icebergMetadata.icebergPartitionSpec.fields[].fieldId`	integer	—	The partition field ID (auto-assigned starting from 1000 if not specified)
`icebergMetadata.icebergPartitionSpec.fields[].name`	string	yes	The name of the partition field
`icebergMetadata.icebergPartitionSpec.fields[].sourceId`	integer	yes	The source column ID to partition on
`icebergMetadata.icebergPartitionSpec.fields[].transform`	string	yes	The partition transform function (identity, bucket[N], truncate[N], year, month, day, hour)
`icebergMetadata.icebergPartitionSpec.specId`	integer	—	The partition spec ID (defaults to 0 if not specified)
`icebergMetadata.icebergSchema`	object	—	Schema definition for flat tables with primitive types only.
`icebergMetadata.icebergSchema.schemaFieldList`	array<object>	yes
`icebergMetadata.icebergSchema.schemaFieldList[].id`	integer	—	The unique identifier for the field
`icebergMetadata.icebergSchema.schemaFieldList[].name`	string	yes	The name of the field
`icebergMetadata.icebergSchema.schemaFieldList[].required`	boolean	—	A Boolean value that specifies whether values are required for each row in this field
`icebergMetadata.icebergSchema.schemaFieldList[].type`	string	yes	The field type
`icebergMetadata.icebergSchemaV2`	object	—	Schema definition that supports Apache Iceberg nested types (struct, list, map) and primitive types.
`icebergMetadata.icebergSchemaV2.identifierFieldIds`	array<integer>	—	A list of field IDs that are used as the identifier fields for the table.
`icebergMetadata.icebergSchemaV2.schemaId`	integer	—	An optional unique identifier for the schema
`icebergMetadata.icebergSchemaV2.schemaV2FieldList`	array<object>	yes	The schema fields for the table
`icebergMetadata.icebergSchemaV2.schemaV2FieldList[].doc`	string	—	Optional documentation for the field
`icebergMetadata.icebergSchemaV2.schemaV2FieldList[].id`	integer	yes	The unique identifier for the field
`icebergMetadata.icebergSchemaV2.schemaV2FieldList[].name`	string	yes	The name of the field
`icebergMetadata.icebergSchemaV2.schemaV2FieldList[].required`	boolean	yes	A Boolean value that specifies whether values are required for each row in this field
`icebergMetadata.icebergSchemaV2.schemaV2FieldList[].type`	object	yes	The field type.
`icebergMetadata.icebergSchemaV2.schemaV2FieldType`	enum	yes	The type of the top-level schema, which is always 'struct' Allowed: `struct`
`icebergMetadata.icebergSortOrder`	object	—	S3TablesTableIcebergSortOrder is a nested property type of AWS::S3Tables::Table.
`icebergMetadata.icebergSortOrder.fields`	array<object>	yes	List of sort fields
`icebergMetadata.icebergSortOrder.fields[].direction`	enum	yes	Sort direction (asc or desc) Allowed: `asc, desc`
`icebergMetadata.icebergSortOrder.fields[].nullOrder`	enum	yes	Null value ordering (nulls-first or nulls-last) Allowed: `nulls-first, nulls-last`
`icebergMetadata.icebergSortOrder.fields[].sourceId`	integer	yes	The source column ID to sort on
`icebergMetadata.icebergSortOrder.fields[].transform`	string	yes	The sort transform function
`icebergMetadata.icebergSortOrder.orderId`	integer	—	The sort order ID (defaults to 1 if not specified, 0 is reserved for unsorted)
`icebergMetadata.tableProperties`	map<string>	—
`namespace`	string	yes
`openTableFormat`	enum	yes	Create-only in AWS: changing it requires replacing the resource. Allowed: `ICEBERG`
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`snapshotManagement`	object	—	S3TablesTableSnapshotManagement is a nested property type of AWS::S3Tables::Table.
`snapshotManagement.maxSnapshotAgeHours`	integer	—	The maximum age of a snapshot before it can be expired.
`snapshotManagement.minSnapshotsToKeep`	integer	—	The minimum number of snapshots to keep.
`snapshotManagement.status`	enum	—	Indicates whether the SnapshotManagement maintenance action is enabled. Allowed: `enabled, disabled`
`storageClassConfiguration`	object	—	Create-only in AWS: changing it requires replacing the resource.
`storageClassConfiguration.storageClass`	enum	—	The storage class for the table Allowed: `STANDARD, INTELLIGENT_TIERING`
`tableBucketARN`	string	yes	Create-only in AWS: changing it requires replacing the resource.
`tableName`	string	yes
`tags`	array<object>	—	User tags (key-value pairs) to associate with the table.
`tags[].key`	string	yes
`tags[].value`	string	yes
`withoutMetadata`	enum	—	Create-only in AWS: changing it requires replacing the resource. Allowed: `Yes`

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.
`tableARN`	string	—	Read-only: reported by AWS after creation.
`versionToken`	string	—	Read-only: reported by AWS after creation.
`warehouseLocation`	string	—	Read-only: reported by AWS after creation.

S3TablesTableBucket # CLOUD CONTROL · AWS::S3Tables::TableBucket

S3TablesTableBucket manages AWS::S3Tables::TableBucket through the AWS Cloud Control API.

kubectl get s3tablestablebuckets · example on GitHub

Example

# S3TablesTableBucket — S3 Tables
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/s3tables.html#s3tablestablebucket
apiVersion: aws.konfig.io/v1alpha1
kind: S3TablesTableBucket
metadata:
  name: example-s3tablestablebucket
  namespace: default
spec:
  encryptionConfiguration:
    kmsKeyArn: arn:aws:iam::123456789012:role/example-role
    sseAlgorithm: example
  metricsConfiguration:
    status: Enabled
  providerRef:
    name: example-s3tablestablebucket
    region: us-east-1
  replicationConfiguration:
    role: example
    rules:
    - destinations:
      - destinationTableBucketARN: arn:aws:iam::123456789012:role/example-role
  storageClassConfiguration:
    storageClass: STANDARD
  tableBucketName: example-s3tablestablebucket
  tags:
  - key: example
    value: example
  unreferencedFileRemoval:
    noncurrentDays: 1
    status: Enabled
    unreferencedDays: 1

Spec

Field	Type	Required	Description
`encryptionConfiguration`	object	—	S3TablesTableBucketEncryptionConfiguration is a nested property type of AWS::S3Tables::TableBucket.
`encryptionConfiguration.kmsKeyArn`	string	—	ARN of the KMS key to use for encryption
`encryptionConfiguration.sseAlgorithm`	string	—	Server-side encryption algorithm
`metricsConfiguration`	object	—	S3TablesTableBucketMetricsConfiguration is a nested property type of AWS::S3Tables::TableBucket.
`metricsConfiguration.status`	enum	—	Indicates whether Metrics are enabled. Allowed: `Enabled, Disabled`
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`replicationConfiguration`	object	—	S3TablesTableBucketReplicationConfiguration is a nested property type of AWS::S3Tables::TableBucket.
`replicationConfiguration.role`	string	yes	The ARN of the IAM role to use for replication
`replicationConfiguration.rules`	array<object>	yes	List of replication rules
`replicationConfiguration.rules[].destinations`	array<object>	yes	List of replication destinations
`replicationConfiguration.rules[].destinations[].destinationTableBucketARN`	string	yes	The ARN of the destination table bucket
`storageClassConfiguration`	object	—	S3TablesTableBucketStorageClassConfiguration is a nested property type of AWS::S3Tables::TableBucket.
`storageClassConfiguration.storageClass`	enum	—	The storage class for the table bucket Allowed: `STANDARD, INTELLIGENT_TIERING`
`tableBucketName`	string	yes	Create-only in AWS: changing it requires replacing the resource.
`tags`	array<object>	—	User tags (key-value pairs) to associate with the table bucket.
`tags[].key`	string	yes
`tags[].value`	string	yes
`unreferencedFileRemoval`	object	—	S3TablesTableBucketUnreferencedFileRemoval is a nested property type of AWS::S3Tables::TableBucket.
`unreferencedFileRemoval.noncurrentDays`	integer	—	S3 permanently deletes noncurrent objects after the number of days specified by the NoncurrentDays property.
`unreferencedFileRemoval.status`	enum	—	Indicates whether the Unreferenced File Removal maintenance action is enabled. Allowed: `Enabled, Disabled`
`unreferencedFileRemoval.unreferencedDays`	integer	—	For any object not referenced by your table and older than the UnreferencedDays property, S3 creates a delete marker and marks the object version as noncurrent.

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.
`tableBucketARN`	string	—	Read-only: reported by AWS after creation.

S3TablesTableBucketPolicy # CLOUD CONTROL · AWS::S3Tables::TableBucketPolicy

S3TablesTableBucketPolicy manages AWS::S3Tables::TableBucketPolicy through the AWS Cloud Control API.

kubectl get s3tablestablebucketpolicies · example on GitHub

Example

# S3TablesTableBucketPolicy — S3 Tables
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/s3tables.html#s3tablestablebucketpolicy
apiVersion: aws.konfig.io/v1alpha1
kind: S3TablesTableBucketPolicy
metadata:
  name: example-s3tablestablebucketpolicy
  namespace: default
spec:
  providerRef:
    name: example-s3tablestablebucketpolicy
    region: us-east-1
  tableBucketARN: arn:aws:iam::123456789012:role/example-role

Spec

Field	Type	Required	Description
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`resourcePolicy`	object	yes
`tableBucketARN`	string	yes	Create-only in AWS: changing it requires replacing the resource.

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.

S3TablesTablePolicy # CLOUD CONTROL · AWS::S3Tables::TablePolicy

S3TablesTablePolicy manages AWS::S3Tables::TablePolicy through the AWS Cloud Control API.

kubectl get s3tablestablepolicies · example on GitHub

Example

# S3TablesTablePolicy — S3 Tables
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/s3tables.html#s3tablestablepolicy
apiVersion: aws.konfig.io/v1alpha1
kind: S3TablesTablePolicy
metadata:
  name: example-s3tablestablepolicy
  namespace: default
spec:
  providerRef:
    name: example-s3tablestablepolicy
    region: us-east-1
  tableARN: arn:aws:iam::123456789012:role/example-role

Spec

Field	Type	Required	Description
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`resourcePolicy`	object	yes
`tableARN`	string	yes	Create-only in AWS: changing it requires replacing the resource.

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`namespace`	string	—	Read-only: reported by AWS after creation.
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.
`tableBucketARN`	string	—	Read-only: reported by AWS after creation.
`tableName`	string	—	Read-only: reported by AWS after creation.