Connect to Apache Iceberg

Learn to create a connection to Apache Iceberg in OCI GoldenGate.

Before you begin

Before you create the connection, ensure that you:

Review how OCI GoldenGate connects to your source and targets.
Configure the required policies to enable secure Vault and Secrets access, such as use secrets, use vaults, and read secret-bundles. For more information, see Minimum recommended policies.

Create the connection

To create a connection to Apache Iceberg:

From the OCI GoldenGate Overview page, click Connections.
You can also click Create Connection under the Get started section and skip to step 3.
On the Connections page, click Create Connection.
On the Create Connection page, complete the fields as follows:
1. For Name, enter a name for the connection.
2. (Optional) For Description, enter a description that helps you distinguish this connection from others.
3. For Compartment, select the compartment in which to create the connection.
4. For Type, under Big Data, select Apache Iceberg.
5. Select a Catalog type from the dropdown, and then complete the relevant catalog fields:
  - Glue
  - Hadoop
  - Nessie
  - Polaris
  - Rest
6. Select a Storage type from the dropdown, and then complete the relevant storage fields:
  - Amazon S3
  - Google Cloud Storage
  - Azure Data Lake Storage
Expand Show advanced options. You can configure the following options:
- Security
  - Deselect Use vault secrets you prefer not to use password secrets for this connection. If not selected:
    - Select Use Oracle-managed encryption key to leave all encryption key management to Oracle.
    - Select Use customer-managed encryption key to select a specific encryption key stored in your OCI Vault to encrypt your connection credentials.
- Network connectivity
  - Shared endpoint, to share an endpoint with the assigned deployment. You must allow connectivity from the deployment's ingress IP.
  - Dedicated endpoint, for network traffic through a dedicated endpoint in the assigned subnet in your VCN. You must allow connectivity from this connection's ingress IPs.
    Note:
    
    If a dedicated connection remains unassigned for seven days, then the service converts it to a shared connection.
    
    Learn more about Oracle GoldenGate connectivity.
- Tags: Add tags to organize your resources.
Click Create.

After the connection is created, it appears in the Connection list. Ensure that you assign the connection to a deployment to use it in a data replication process.

Known issues

Issue with Apache Iceberg connections in OCI GoldenGate

If you encounter the following error when using Apache Iceberg connections, then open a support ticket, share the details and error message:

ERROR 2025-07-08 13:34:09.000481 [main] -  Parameter [awsSecretKey] is missing in the
      connection payload. Parameter [awsSecretKey] is missing in the connection payload.

Title and Copyright Information

Oracle and/or its affiliates.