Specifies an optional Amazon Web Services IAM role to use for the COPY command.
| Valid in: | DATA and PROC steps (when accessing DBMS data using SAS/ACCESS software) |
|---|---|
| Category: | Data Access |
| Alias: | BL_ROLE= |
| Default: | none |
| Data source: | Amazon Redshift, Spark |
| Note: | Support for Spark was added in SAS 9.4M9. |
| See: | BL_KEY= data set option, BL_SECRET= data set option, BL_TOKEN= data set option |
| Example: |
|
Table of Contents
specifies the role value to use for the CREDENTIALS parameter in the AWS COPY command.
When BL_IAM_ROLE= is specified, the AWS COPY command uses the assigned value for the CREDENTIALS parameter. IAM roles are specified in the AWS environment using the following syntax. They are used as part of the authentication process.
aws_iam_role=arn:aws:iam::<AWS-account-ID>:role/<role-name>
For BL_IAM_ROLE=, use the following syntax:
BL_IAM_ROLE='<AWS-account-ID>:role/<role-name>'
SAS/ACCESS converts the value that you provide into the full format that is required for AWS.
For example, you might
specify BL_IAM_ROLE='1234567890:role/RedshiftRole', where 1234567890 is
the AWS account ID and role/RedshiftRole identifies the role resource. SAS/ACCESS converts
this value to the full AWS IAM value arn:aws:iam::1234567890:role/RedshiftRole.
Spark: This option is supported for bulk loading to Databricks in AWS. For more information, see Bulk Loading and Unloading to Databricks in Azure.