Aurora MYSQL 8 Load From S3 Privileges Not Working

Question

I have created an Aurora MYSQL 8 cluster - engine: 8.0.mysql_aurora.3.02.2 and are testing the LOAD FROM S3 statement.  The appropriate S3 role is added to the server and the DB Cluster parameter group has been changed to use this role.

The LOAD FROM S3 statement is working when I use the default admin user however when I create another user and grant it the LOAD FROM S3 privilege the command does not work.  The error I get is  
Access denied; you need (at least one of) the LOAD FROM S3 privilege(s) for this operation.

When I run SELECT * FROM mysql.`user` u  the column Select_into_S3_priv is no longer there as it was in MYSQL 5.7.

Can you confirm if there is an issue with the LOAD FROM S3 command for Aurora MYSQL 8?

Thanks

Accepted Answer

Thank you for asking your question.

Please make sure you activate the role by `SET ROLE role_name` or `SET ROLE ALL` before using the role based privileges.

You can also use the `activate_all_roles_on_login` DB cluster parameter to automatically activate all roles when a user connects to a DB instance. When this parameter is set, you don't have to call the `SET ROLE` statement explicitly to activate a role.

You can find more detailed procedure on this in our and MySQL documents.

I hope this might help.

1. https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Integrating.LoadFromS3.html#AuroraMySQL.Integrating.LoadFromS3.Grant
2. https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Aurora.AuroraMySQL.Compare-80-v3.html#AuroraMySQL.privilege-model
3. https://dev.mysql.com/doc/refman/8.0/en/server-system-variables.html#sysvar_activate_all_roles_on_login

Aurora MYSQL 8 Load From S3 Privileges Not Working

Relevant content