21.9. Secrets Management Functions #
For more information about secrets, refer to Section 14.5.
-
duckdb.create_simple_secret(type TEXT, key_id TEXT, secret TEXT, region TEXT,#optional_parameters) returnsvoid Creates a simple secret for accessing cloud storage services, such as S3, GCS, or R2.
Example 21.38.
-- Create an S3 secret SELECT duckdb.create_simple_secret( type := 'S3', key_id := 'your_access_key', secret := 'your_secret_key', region := 'us-east-1' ); -- Create an S3 secret with session token SELECT duckdb.create_simple_secret( type := 'S3', key_id := 'your_access_key', secret := 'your_secret_key', region := 'us-east-1', session_token := 'your_session_token' );Required parameters:
Name
Type
Description
typetextThe type of secret (e.g.,
'S3','GCS','R2')key_idtextThe access key ID or equivalent
secrettextThe secret key or equivalent
Optional parameters:
Name
Type
Description
session_tokentextSession token for temporary credentials
endpointtextCustom endpoint URL
url_styletextURL style.
Possible values:
'vhost''path'
use_ssltextSpecifies whether to use SSL.
Possible values:
true
false
Default value: true.
scopetextScope for the secret.
Default value: ''
regiontextThe region for the service