Cloudera Docs

Setting up an external account for Ozone S3 access

Learn about how to set up an external account for Ozone S3 access.

You must have S3 credentials for Hive.
  1. Run the following commands on CLI to get the S3 credentials for Hive: 
    kinit hive
ozone s3 getsecret --om-service-id=[***OZONE-SERVICE-ID***]
  2. Sign in to Cloudera Manager.
  3. Navigate to Administration > External Accounts > AWS Credentials > Add Access Key Credentials.
    1. Enter the S3 credentials for Hive and click Add.
  4. Enter the S3 credentials for Hive and click Add.
  5. Enable Hive and Impala to use these credentials:
    1. Navigate to Cloudera Manager Home > Administration > External Accounts > AWS Credentials.
    2. Click on the three dots next to the Hive credentials and click Edit Connectivity.
    3. Under Cluster Access to S3 section, click Enable for [***CLUSTER-NAME***].
    4. After enabling the cluster, keep clicking Continue until Finish button appears.
    5. Click Finish.