KMS credential vending

[smaheshwar-pltr]

Feature Request / Improvement

Lifting out the discussion in #13225 (comment) to a separate issue / feature request.

#13225 supports KMS clients for REST catalogs, configured at the catalog-level and not at a finer level e.g. at the table-level where a REST catalog can vend credentials to be used in KMS clients that only support operating on the required key. This issue tracks supporting that.

Query engine

None

Willingness to contribute

• I can contribute this improvement/feature independently
• I would be willing to contribute this improvement/feature with guidance from the Iceberg community
• I cannot contribute this improvement/feature at this time