For a cloud connection, the secure connect bundle zip is extracted in the same directory to allow python to load the certs. In some environments, the file system where the zip is can be read-only (e.g Azure Function). This makes the cloud cluster connection fail because the zip cannot be extracted at this location.
We should provide a way to specify the temporary directory. I'm thinking to add use_default_tempdir cloud config options: