DATABEND_DSN=lake://<user>:<password>@<tenant>.gw.aws-us-west-2.default.lake.tidbcloud.com:443/default?warehouse=default
# S3 read credentials for Databend's s3:// external stage over the ad-hoc bucket. SSO/STS temporary
# credentials work (the stage carries SESSION_TOKEN). Mint them from your profile, e.g.:
#   eval "$(aws configure export-credentials --profile pingcap-datalake --format env)"
#   SALESFORCE_S3_ACCESS_KEY_ID=$AWS_ACCESS_KEY_ID
#   SALESFORCE_S3_SECRET_ACCESS_KEY=$AWS_SECRET_ACCESS_KEY
#   SALESFORCE_S3_SESSION_TOKEN=$AWS_SESSION_TOKEN
SALESFORCE_S3_ACCESS_KEY_ID=
SALESFORCE_S3_SECRET_ACCESS_KEY=
SALESFORCE_S3_SESSION_TOKEN=