embucket-labs
embucket-labs copied to clipboard
Incorrect error on failure to create table on s3 table database
Getting an error when trying to create a table in s3 table bucket database. To reproduce run (with
$ http http://localhost:3000/v1/metastore/volumes ident=demo type=s3-tables region=us-east-2 endpoint=https://s3tables.us-east-2.amazonaws.com credentials:='{"credential_type":"access_key","aws-access-key-id":"xxx","aws-secret-access-key":"xxx"}' name=demo 'arn=arn:aws:s3tables:us-east-2:767397688925:bucket/my-table-bucket'
$ snow sql -c local ✔ 18:16:45
╭─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────╮
│ Welcome to Snowflake-CLI REPL │
│ Type 'exit' or 'quit' to leave │
╰─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────╯
> show databases;
+---------------------------------------------------------------+
| created_on | name | kind | database_name | schema_name |
|------------+---------+----------+---------------+-------------|
| None | demo | STANDARD | None | None |
| None | slatedb | STANDARD | None | None |
+---------------------------------------------------------------+
> create schema demo.s2;
+-------+
| count |
|-------|
| 0 |
+-------+
> create table demo.s2.t2 (c1 INT, c2 TEXT);
Error occurred: 000200: 200: Can't downcast error: Table t2 not found.
Logs:
{"timestamp":"2025-07-10T01:18:33.758891Z","level":"ERROR","fields":{"error":"Iceberg error: The operation lacked the necessary privileges to complete for path metadata/00000-3f394c9f-4d4d-457d-b9ee-ebe70f8c7c9f.metadata.json: Error performing PUT https://s3tables.us-east-2.amazonaws.com/2676b452-ec2a-4579-waefdbmygqf7ksw8e3rgkk613dczguse2b--table-s3/metadata/00000-3f394c9f-4d4d-457d-b9ee-ebe70f8c7c9f.metadata.json in 219.2005ms - Server returned non-2xx status code: 403 Forbidden: {\"message\":\"Unable to determine service/operation name to be authorized\"}"},"target":"core_executor::query"}
{"timestamp":"2025-07-10T01:18:33.759227Z","level":"ERROR","fields":{"error":"Iceberg error: The operation lacked the necessary privileges to complete for path metadata/00000-3f394c9f-4d4d-457d-b9ee-ebe70f8c7c9f.metadata.json: Error performing PUT https://s3tables.us-east-2.amazonaws.com/2676b452-ec2a-4579-waefdbmygqf7ksw8e3rgkk613dczguse2b--table-s3/metadata/00000-3f394c9f-4d4d-457d-b9ee-ebe70f8c7c9f.metadata.json in 219.2005ms - Server returned non-2xx status code: 403 Forbidden: {\"message\":\"Unable to determine service/operation name to be authorized\"}"},"target":"core_executor::query"}
{"timestamp":"2025-07-10T01:18:33.759594Z","level":"ERROR","fields":{"error":"Iceberg error: The operation lacked the necessary privileges to complete for path metadata/00000-3f394c9f-4d4d-457d-b9ee-ebe70f8c7c9f.metadata.json: Error performing PUT https://s3tables.us-east-2.amazonaws.com/2676b452-ec2a-4579-waefdbmygqf7ksw8e3rgkk613dczguse2b--table-s3/metadata/00000-3f394c9f-4d4d-457d-b9ee-ebe70f8c7c9f.metadata.json in 219.2005ms - Server returned non-2xx status code: 403 Forbidden: {\"message\":\"Unable to determine service/operation name to be authorized\"}"},"target":"core_executor::query"}
{"timestamp":"2025-07-10T01:18:33.850542Z","level":"ERROR","fields":{"error":"Iceberg error: The operation lacked the necessary privileges to complete for path metadata/00000-3f394c9f-4d4d-457d-b9ee-ebe70f8c7c9f.metadata.json: Error performing PUT https://s3tables.us-east-2.amazonaws.com/2676b452-ec2a-4579-waefdbmygqf7ksw8e3rgkk613dczguse2b--table-s3/metadata/00000-3f394c9f-4d4d-457d-b9ee-ebe70f8c7c9f.metadata.json in 219.2005ms - Server returned non-2xx status code: 403 Forbidden: {\"message\":\"Unable to determine service/operation name to be authorized\"}"},"target":"core_executor::service"}
{"timestamp":"2025-07-10T01:18:33.850799Z","level":"ERROR","fields":{"error":"Iceberg error: The operation lacked the necessary privileges to complete for path metadata/00000-3f394c9f-4d4d-457d-b9ee-ebe70f8c7c9f.metadata.json: Error performing PUT https://s3tables.us-east-2.amazonaws.com/2676b452-ec2a-4579-waefdbmygqf7ksw8e3rgkk613dczguse2b--table-s3/metadata/00000-3f394c9f-4d4d-457d-b9ee-ebe70f8c7c9f.metadata.json in 219.2005ms - Server returned non-2xx status code: 403 Forbidden: {\"message\":\"Unable to determine service/operation name to be authorized\"}"},"target":"api_snowflake_rest::handlers"}
{"timestamp":"2025-07-10T01:18:33.852470Z","level":"INFO","fields":{"message":"close","time.busy":"1.24ms","time.idle":"87.5µs"},"target":"api_snowflake_rest::error","span":{"error":"Internal server error","error_stack_trace":"Iceberg error: The operation lacked the necessary privileges to complete for path metadata/00000-3f394c9f-4d4d-457d-b9ee-ebe70f8c7c9f.metadata.json: Error performing PUT https://s3tables.us-east-2.amazonaws.com/2676b452-ec2a-4579-waefdbmygqf7ksw8e3rgkk613dczguse2b--table-s3/metadata/00000-3f394c9f-4d4d-457d-b9ee-ebe70f8c7c9f.metadata.json in 219.2005ms - Server returned non-2xx status code: 403 Forbidden: {\"message\":\"Unable to determine service/operation name to be authorized\"}\n0: <transparent>\n1: Iceberg error: The operation lacked the necessary privileges to complete for path metadata/00000-3f394c9f-4d4d-457d-b9ee-ebe70f8c7c9f.metadata.json: Error performing PUT https://s3tables.us-east-2.amazonaws.com/2676b452-ec2a-4579-waefdbmygqf7ksw8e3rgkk613dczguse2b--table-s3/metadata/00000-3f394c9f-4d4d-457d-b9ee-ebe70f8c7c9f.metadata.json in 219.2005ms - Server returned non-2xx status code: 403 Forbidden: {\"message\":\"Unable to determine service/operation name to be authorized\"}, at crates/core-executor/src/query.rs:724:14\n2: ObjectStore(PermissionDenied { path: \"metadata/00000-3f394c9f-4d4d-457d-b9ee-ebe70f8c7c9f.metadata.json\", source: RetryError(RetryErrorImpl { method: PUT, uri: Some(https://s3tables.us-east-2.amazonaws.com/2676b452-ec2a-4579-waefdbmygqf7ksw8e3rgkk613dczguse2b--table-s3/metadata/00000-3f394c9f-4d4d-457d-b9ee-ebe70f8c7c9f.metadata.json), retries: 0, max_retries: 10, elapsed: 219.2005ms, retry_timeout: 180s, inner: Status { status: 403, body: Some(\"{\\\"message\\\":\\\"Unable to determine service/operation name to be authorized\\\"}\") } }) })","status_code":500,"name":"api-snowflake-rest::Error::into_response"},"spans":[]}
{"timestamp":"2025-07-10T01:18:35.048535Z","level":"ERROR","fields":{"error":"External error: Table t2 not found."},"target":"df_catalog::schema"}
{"timestamp":"2025-07-10T01:18:35.049326Z","level":"ERROR","fields":{"error":"DataFusion error: External error: Table t2 not found."},"target":"core_executor::query"}
{"timestamp":"2025-07-10T01:18:35.049386Z","level":"ERROR","fields":{"error":"DataFusion error: External error: Table t2 not found."},"target":"core_executor::query"}
{"timestamp":"2025-07-10T01:18:35.049431Z","level":"ERROR","fields":{"error":"DataFusion error: External error: Table t2 not found."},"target":"core_executor::query"}
{"timestamp":"2025-07-10T01:18:35.150593Z","level":"ERROR","fields":{"error":"DataFusion error: External error: Table t2 not found."},"target":"core_executor::service"}
{"timestamp":"2025-07-10T01:18:35.150720Z","level":"ERROR","fields":{"error":"DataFusion error: External error: Table t2 not found."},"target":"api_snowflake_rest::handlers"}
{"timestamp":"2025-07-10T01:18:35.151296Z","level":"INFO","fields":{"message":"close","time.busy":"313µs","time.idle":"89.8µs"},"target":"api_snowflake_rest::error","span":{"error":"Can't downcast error: Table t2 not found.","error_stack_trace":"DataFusion error: External error: Table t2 not found.\n0: <transparent>\n1: DataFusion error: External error: Table t2 not found., at crates/core-executor/src/query.rs:1638:26\n2: External(Iceberg(External(Text(\"Table t2 not found.\"))))","status_code":200,"name":"api-snowflake-rest::Error::into_response"},"spans":[]}