Accessing Amazon Athena over JDBC with an IAM role
I have an analytics application running on EC2. The application uses the Athena JDBC connector to connect to Athena and run queries. Can I use an IAM role attached to the EC2 instance to authorize the Athena connection, rather than embedding credentials in the JDBC connection string?
- Topics
- Analytics
- Tags
- Amazon Athena
- Language
- English
asked 6 years ago2.8K views
- Newest
- Most votes
- Most comments
It is indeed a best practice to use an IAM role rather than embedding credentials in the JDBC connection string. Attach the AWSQuicksightAthenaAccess Managed Policy to the IAM role used in the EC2 instance profile. Then specify the DefaultAWSCredentialsProviderChain in the JDBC connection string. The JDBC connection string would look like this:
jdbc:awsathena://AwsRegion=<aws-region>;S3OutputLocation=s3://<s3_bucket>/;AwsCredentialsProviderClass=com.simba.athena.amazonaws.auth.DefaultAWSCredentialsProviderChain
Read more here on Using Athena with the JDBC Driver.
answered 6 years ago
Relevant content
asked 3 years ago
- AWS OFFICIALUpdated 3 years ago
