Iceberg Connector

Overview

Used for OneTrust Data Discovery Scanners, the Iceberg Connector provides complete visibility into sensitive data locations across your Apache Iceberg ecosystem by continuously scanning and mapping Iceberg table assets. This real-time data inventory, combined with automated classification and lineage tracking, eliminates blind spots in your data landscape and ensures teams can confidently use data while maintaining compliance.

Important:

The Iceberg Connector is under General Availability for customers with solution packaging only.

Pod Residency

<storage-scanner>

Connection Method

API

Supported Scan Actions

Scan Type

Description

Catalog

This scan type will fetch only the metadata in the database like details of table, or column are scanned.

Catalog & Scan

This scan type will scan both metadata and data under the tables and return the appropriate terms.

Credential & System Permissions

Important:

OneTrust recommends to adhere to your organization's security and infrastructure policy and include system engineer resources or other qualified subject matter experts to set up credentials on data sources. For specific instructions for how to enable these credentials, refer to your data source's implementation documentation, knowledge base and/or support resources.

This connector uses Access Key and Secret option authentication.

Sample JSON

JSON 
{
    "access_key_id": "your_access_key_id",
    "secret_access_key": "your_secret_access_key",
    "region": "region",
    "connectionUrl": "your_connection_url"
}

Scan Profile Support

Note:

For additional details on scan profile configuration and management, see Setting Up Scan Profiles.

Limits

  • Maximum Number of Databases

  • Maximum Number of Tables per Database

Scope

  • Incremental Scan

Include/Exclude Paths

Supports inclusion or exclusion by Database name, Table name, or Column name.