Does the S3 source assume role setting apply to just s3:GetObject or include the sqs:ReceiveMessage too?

[britton-from-notion]

Hello 👋

Wondering if when setting the auth.assume_role setting for a given S3 source, which AWS API calls leverage this assumed role.

For example, if an user has 2 roles:

1. Role A - has access to s3:GetObject
2. Role B - has access to sqs:ReceiveMessage

Will the S3 source still successfully GetObject and ReceiveMessage if vector is configured to assume Role A?

[pront]

Without testing it myself, I know that Vector will just delegate whatever you set e.g. Role A to the underlying aws libraries. You should be able to create a role C that combines them.

[jszwedko]

Right, to add onto what @pront said the role should be assumed for all AWS API calls.