IAM Roles for Service Accounts support in Dremio

1

I’m trying to find out whether Dremio supports AWS IRSA (IAM Roles for Service Accounts) when accessing S3. Our goal is to use IRSA so we can enforce scoped, per-tenant access within a single S3 bucket—essentially restricting each tenant to only their own prefix/path.

Does Dremio currently support IRSA, and if so, what’s the recommended way to configure it? Any guidance or examples would be greatly appreciated.

Thanks!

2

In version 26.1, which recently shipped, we added support for EKS pod identities. Thus, the K8s service accounts used by the coordinator, executor, etc. of a given Dremio deployment can have their access scoped by the associated IAM role. Users’ access to data in Dremio is governed by Dremio’s RBAC (EE).