Governance-as-Code for the Lakehouse: Managing REST Catalog RBAC and Masking in Git
August 25, 2026Put REST catalog RBAC and masking in Git. How to review grants, apply them safely, and keep lakehouse access from drifting.
Put REST catalog RBAC and masking in Git. How to review grants, apply them safely, and keep lakehouse access from drifting.
Polaris can catalog Iceberg tables across AWS, Azure, and GCP. Four topologies, credential vending, and the tradeoffs of each design.
One suite of REST catalog operations every Iceberg platform should pass. What sameness means, where implementations diverge, and how to test it.
Remote scan planning moves Iceberg file selection into the catalog. What that changes for engines, governance, and operational cost beyond query speed.
A mechanics walkthrough of Iceberg REST scan planning: client-side planning, remote endpoints, pagination, and where engine support stands in 2026.
Can seven Iceberg REST catalogs run the same DuckDB script? What the protocol makes portable, what still differs, and a test matrix you can rerun.
The decoupled data lakehouse: multi-engine freedom with open REST catalogs, credential vending, and an estate that outlives its tools.