[HADOOP-15569] Expand S3A Assumed Role docs

• Type: Sub-task
• Status: Resolved
• Priority: Minor
• Resolution: Duplicate
• Affects Version/s: 3.1.0
• Component/s: documentation, fs/s3
• Target Version/s: 3.2.0
• Assignee: Steve Loughran
• Reporter: Steve Loughran
• Created: 28/Jun/18 19:19
• Updated: 10/Jul/18 16:58
• Resolved: 10/Jul/18 16:58

Description

The S3A assumed role doc is now where we document the permissions needed to work with buckets

1. detail the permissions you need for s3guard user and admin ops
2. and what you need for SSE-KMS

This involves me working them out, so presumably get some new stack traces

also: fix any errors noted in the doc

Issue Links

• Is contained by: HADOOP-15583 Stabilize S3A Assumed Role support
• relates to: HADOOP-15572 Test S3Guard ops with assumed roles & verify required permissions