Apache Polaris
Data catalogpolaris
Iceberg REST catalog with role-based access control and short-lived vended storage credentials.
- Provider
- default
- Kind
- Data catalog
- Category
- Data
| property | type | values | required | kind default | this component |
|---|---|---|---|---|---|
| accessPolicyEnforcement | boolean | — | no | — | ▸ true |
| catalogType | enum | internal | external | no | internal | inherited |
| classification | boolean | — | no | — | ▸ false |
| credentialVending | boolean | — | no | true | inherited |
| fineGrainedAccess | boolean | — | no | false | inherited |
| lineage | boolean | — | no | — | ▸ false |
| managed | boolean | — | no | false | ▸ false |
| scanSchedule | enum | manual | daily | weekly | no | — | inherited |
| sourceCount | integer | — | no | — | inherited |
| tableFormat | enum | iceberg | no | iceberg | inherited |
Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.
No rule reads this kind yet. That is a gap, not a guarantee.
nodes:
- { id: "polaris", component: "polaris" }AWS Application Discovery Serviceaws-application-discovery-serviceAmazon DataZoneaws-datazoneAWS Glue Data Catalogaws-glue-data-catalogAzure API Centerazure-api-centerMicrosoft Purviewazure-purviewR2 Data Catalogcloudflare-r2-data-catalogAlationalationAmundsenamundsenApache AtlasatlasCollibracollibraGeneric data catalogdata-catalogDataHubdatahubOpenMetadataopenmetadataUnity Catalogunity-catalogAgent Registrygoogle-agent-registryBigQuery sharing (Analytics Hub)google-analytics-hubBigLakegoogle-biglakeCloud API Registrygoogle-cloud-api-registryCloud Asset Inventorygoogle-cloud-asset-inventoryDataplex Universal Cataloggoogle-dataplexDataproc Metastoregoogle-dataproc-metastoreIBM Data Product Hubibm-data-product-hubOCI Data Catalogoci-data-catalog
# yaml-language-server: $schema=../../schema/component.schema.json # Apache Polaris: open-source Iceberg REST catalog serving Spark, Trino, Flink and others. # "Access control": RBAC over principals, principal roles and catalog roles; TABLE_READ_DATA and # TABLE_WRITE_DATA hand out short-lived storage credentials scoped to the table location, so the # object store itself is what enforces the grant. Grants are catalog-level, not fine-grained. schemaVersion: "1" type: "component" id: "polaris" kind: "data-catalog" provider: "default" docs: "https://polaris.apache.org/releases/1.0.0/access-control/" defaults: managed: false accessPolicyEnforcement: true classification: false lineage: false properties: credentialVending: type: "boolean" default: true catalogType: type: "enum" values: ["internal", "external"] default: "internal" tableFormat: type: "enum" values: ["iceberg"] default: "iceberg" fineGrainedAccess: type: "boolean" default: false