Cloud & Infrastructure
Bug Report
DuckDB read S3 Parquet files locally but got 403 in a container: secrets and the credential chain
A DuckDB report job queried Parquet files on S3 fine on a laptop and failed with HTTP 403 in its ECS task. Locally DuckDB used a persistent secret from personal credentials; in the container nothing told it to use the task role. How DuckDB secrets and the credential chain work, plus the KMS detail.