Create an Apache Iceberg connection

  • Release version: Australia
  • Updated March 12, 2026
  • 3 minutes to read

    • Establish a zero copy connection to Apache Iceberg in Zero Copy Connector Hub.

    Before you begin

    Role required: df_connection_admin

    About this task

    Work with your data source admin to create a connection to Apache Iceberg. For additional information about connecting, refer to the Iceberg connector documentation.

    Procedure

    1. Navigate to the available primary connectors in Zero Copy Connector Hub in one of the following ways:
      • Navigate to All > Workflow Data Fabric Hub > Available connectors > Primary connectors.
      • Navigate to Admin > Workflow Data Fabric Hub > Available connectors > Primary connectors.
    2. Find the Apache Iceberg connector and select Connect.
    3. On the form, fill in the fields.
      Table 1. New Apache Iceberg Connection form
      Field Description
      Name and description
      Connection label Unique name for this connection. This helps in identifying the connection within your system.
      Connection name System-generated name based on the Connection label. This field cannot be modified once the connection is established.
      Short description Description of the connection explaining what it is about.
      Object storage authentication
      Object storage system Storage system used. The available options are:
      • Amazon S3 (the default)
      • Azure Data Lake Storage (ADLS)
      • S3-Compatible
      Amazon S3
      AWS access key Access key used to access AWS S3.
      AWS secret key Secret key used to access AWS S3.
      AWS region AWS region where your AWS S3 bucket is located.
      S3-Compatible
      S3 endpoint URL Endpoint URL for the S3-compatible object storage system.
      S3 access key Access key used to authenticate with your S3-compatible storage service.
      S3 secret key Secret key used to authenticate with your S3-compatible storage service.
      S3 region Region where your S3-compatible object storage bucket is located.
      Azure Data Lake Storage (ADLS)
      Azure Access Key Access key for ADLS.
    4. Configure the object storage system that you want to use with Apache Iceberg.
      OptionDescription
      Amazon S3
      1. Enter the access key used to access S3.
      2. Enter the secret key used to access S3.
      3. Enter the AWS region where your S3 bucket is located.
      4. Configure the metastore that you want to use with Apache Iceberg.
      S3-Compatible
      1. Enter the endpoint URL for the S3-compatible object storage system.
      2. Enter the access key used to authenticate with your S3-compatible storage service.
      3. Enter the secret key used to authenticate with your S3-compatible storage service.
      4. Enter the region where your S3-compatible object storage bucket is located.
      5. Configure the metastore that you want to use with Apache Iceberg.
      Azure Data Lake Storage (ADLS) Enter the ADLS Access Key.
    5. Configure the metastore that you want to use with Apache Iceberg.
      OptionDescription
      Hive Thrift
      1. Attach the truststore file using one of the following options:
        • Upload the truststore file by selecting Attach TrustStore file and selecting the file.
        • Copy and paste the contents of the truststore file.
      2. Enter the truststore password.
      3. Enter the metastore URI that you want to connect to using the Thrift protocol. For example:

        thrift://<host>:<port>
      AWS Glue
      1. Enter the AWS access key to connect to the Glue Catalog.
      2. Enter the AWS secret key to use to connect to the Glue Catalog.
      3. Enter the AWS region of the Glue Catalog.
      Note:
      AWS Glue appears when Amazon S3 is selected as the object storage system.
      Rest
      1. Enter the URI of your Iceberg REST Catalog server.
      2. Enter the location where table data files are stored (Warehouse).
      3. Enter the client ID used to authenticate your application via OAuth2.
      4. Enter the client secret used with the client ID to authenticate your application via OAuth2.
      5. Enter the scope that specifies which resources and operations the application is authorized to access via OAuth2.
      Note:
      Rest appears when S3-Compatible is selected as the object storage system.
    6. Select Connect.

    Result

    A test connection is made to the external data source, verifying that the connection details are correct and the data source is accessible.

    What to do next

    If the connection succeeds, configure data steward access on the Access Control tab. See Manage access to an established connection using roles.

    If the connection fails, verify the connection details with your data source administrator and try again.