From 0ee09578ab024b6f8b3edfccc41882ef94ba411c Mon Sep 17 00:00:00 2001 From: Bobby Iliev Date: Tue, 7 Oct 2025 21:30:22 +0300 Subject: [PATCH 1/2] docs: clarify default behavior for REGION in AWS connections --- doc/user/content/sql/create-connection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/doc/user/content/sql/create-connection.md b/doc/user/content/sql/create-connection.md index 66804b3b2ca13..d78e93336e2d1 100644 --- a/doc/user/content/sql/create-connection.md +++ b/doc/user/content/sql/create-connection.md @@ -36,7 +36,7 @@ perform [authentication with an Amazon RDS MySQL database](#mysql-aws-connection |
Field
| Value | Description |-------------------------------------------|------------------|------------------------------ | `ENDPOINT` | `text` | *Advanced.* Override the default AWS endpoint URL. Allows targeting S3-compatible services like MinIO. -| `REGION` | `text` | The AWS region to connect to. +| `REGION` | `text` | The AWS region to connect to. Defaults to the current Materialize region. | `ACCESS KEY ID` | secret or `text` | The access key ID to connect with. Triggers credentials-based authentication.

Warning! Use of credentials-based authentication is deprecated. AWS strongly encourages the use of role assumption-based authentication instead. | `SECRET ACCESS KEY` | secret | The secret access key corresponding to the specified access key ID.

Required and only valid when `ACCESS KEY ID` is specified. | `SESSION TOKEN` | secret or `text` | The session token corresponding to the specified access key ID.

Only valid when `ACCESS KEY ID` is specified. From 795aa45bc57f8ea90b242fe448ba231271df3dad Mon Sep 17 00:00:00 2001 From: Bobby Iliev Date: Wed, 8 Oct 2025 14:34:55 +0300 Subject: [PATCH 2/2] docs: add REGION to AWS connection examples --- doc/user/content/sql/create-connection.md | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/doc/user/content/sql/create-connection.md b/doc/user/content/sql/create-connection.md index d78e93336e2d1..c89cec4208208 100644 --- a/doc/user/content/sql/create-connection.md +++ b/doc/user/content/sql/create-connection.md @@ -147,7 +147,8 @@ To create an AWS connection that will assume the `WarehouseExport` role: ```mzsql CREATE CONNECTION aws_role_assumption TO AWS ( - ASSUME ROLE ARN = 'arn:aws:iam::000000000000:role/WarehouseExport' + ASSUME ROLE ARN = 'arn:aws:iam::000000000000:role/WarehouseExport', + REGION = 'us-east-1' ); ``` {{< /tab >}} @@ -315,7 +316,8 @@ CREATE CONNECTION kafka_connection TO KAFKA ( ```mzsql CREATE CONNECTION aws_msk TO AWS ( - ASSUME ROLE ARN = 'arn:aws:iam::000000000000:role/MaterializeMSK' + ASSUME ROLE ARN = 'arn:aws:iam::000000000000:role/MaterializeMSK', + REGION = 'us-east-1' ); CREATE CONNECTION kafka_msk TO KAFKA ( @@ -734,7 +736,8 @@ an SSH bastion server to accept connections from Materialize, check [this guide] ```mzsql CREATE CONNECTION aws_rds_mysql TO AWS ( - ASSUME ROLE ARN = 'arn:aws:iam::000000000000:role/MaterializeRDS' + ASSUME ROLE ARN = 'arn:aws:iam::000000000000:role/MaterializeRDS', + REGION = 'us-west-1' ); CREATE CONNECTION mysql_connection TO MYSQL (