Skip to main content
The RisingWave engine uses object storage to persist durable streaming state. During Private Preview, StreamNative provides this store with Amazon S3. This bucket is engine infrastructure. It is separate from Pulsar or Kafka topic storage and from any Pulsar tiered-storage bucket.

​
Resource model

StreamNative provisions one shared S3 bucket for each SQLWorkspace-enabled AWS placement. Each SQLWorkspace uses a separate directory under the bucket’s workspaces/ prefix. StreamNative also creates a dedicated AWS IAM identity for each workspace and binds it to the service account used by the managed engine. The identity is limited to that workspace’s storage path, and the engine obtains short-lived AWS credentials without static access keys. The bucket stores RisingWave state required for durable stream processing. SQLCatalog continues to read events from the connected Pulsar or Kafka cluster; source topics are not migrated into this bucket.

​
Security

The managed bucket:
  • Blocks public access.
  • Requires encrypted transport.
  • Enables server-side encryption at rest.
  • Restricts each workspace identity to its assigned storage path.
StreamNative manages the bucket, workspace storage paths, and AWS identities. Do not modify or delete objects in this bucket directly, because doing so can make the SQLWorkspace engine unavailable or corrupt its state.
Amazon S3 is the only managed SQLWorkspace object-storage provider supported during Private Preview. Object storage on Azure, Google Cloud, Alibaba Cloud, or other providers is not supported.