https://community.cloudera.com/t5/Support-Questions/Issue-creating-accessing-hive-external-table-with-s3/m-p/178874#M141120 <P>I have configured the <STRONG>s3 keys</STRONG> (access key and secret key) in a <STRONG>jceks</STRONG> file using <STRONG>hadoop-credential</STRONG> api. Commands used for the same are as below:</P><P><EM>hadoop credential create fs.s3a.access.key -provider jceks://hdfs@nn_hostname/tmp/s3creds_test.jceks</EM></P><P><EM>hadoop credential create fs.s3a.secret.key -provider jceks://hdfs@nn_hostname/tmp/s3creds_test.jceks</EM></P><P>Then, I am opening a connection to <STRONG>Spark Thrift Server</STRONG> using beeline and passing the jceks file path in the connection string as below:</P><P><EM>beeline -u "jdbc:hive2://hostname:10001/;principal=hive/_HOST@?hadoop.security.credential.provider.path=jceks://hdfs@nn_hostname/tmp/s3creds_test.jceks;</EM></P><P>Now, when I try to create an external table with the location in s3, it fails with the below exception:</P><P><EM>CREATE EXTERNAL TABLE IF NOT EXISTS test_table_on_s3 (col1 String, col2 String) row format delimited fields terminated by ',' LOCATION 's3a://bucket_name/kalmesh/';</EM></P><P><STRONG>Exception:</STRONG> Error: org.apache.spark.sql.execution.QueryExecutionException: FAILED: Execution Error, return code 1 from org.apache.hadoop.hive.ql.exec.DDLTask. MetaException(message:Got exception: java.nio.file.AccessDeniedException s3a://bucket_name/kalmesh: getFileStatus on s3a://bucket_name/kalmesh: com.amazonaws.services.s3.model.AmazonS3Exception: Forbidden (Service: Amazon S3; Status Code: 403; Error Code: 403 Forbidden; Request ID: request_id), S3 Extended Request ID: extended_request_id=) (state=,code=0)</P><P>However, this works fine with Hive Thrift Server.</P><P><STRONG>HDP version:</STRONG> HDP 2.5</P><P><STRONG>Spark version: </STRONG>1.6</P> Fri, 19 May 2017 12:56:19 GMT sam_kalmesh 2017-05-19T12:56:19Z