Athena | Cross Account Access to Connector

Question

I am trying to run a cross-account Athena query :
1. I can list thedefault catalog ARN ""glue:arn:aws:glue:us-east-1:999999999999:catalog" fine (https://docs.aws.amazon.com/athena/latest/ug/security-iam-cross-account-glue-catalog-access.html)
2. I am unclear how to reference other connector catalogs
3. Standard presto "show catalogs" doesn't work

How do I reference and query a catalog cross account. Note the second catalog is a connector (hive) from the athena.

Jann_P · Answer

Hello AK47,

Please see my answers below:

1. The doc you shared is for Glue data catalog only, not including other data catalogs such as a hive metastore.

2. If you would like to query a Hive metastore from another account, you would need to set up Cross Account Lambda Invocation and also provide cross-account access to data. The steps to be followed are listed here:
https://docs.aws.amazon.com/athena/latest/ug/hive-metastore-iam-access-lambda.html#hive-metastore-iam-access-lambda-cross-account-invocation

3. Athena supports some, but not all, Presto and Trino functions and features. If you would like to list the catalogs in a programmatic way, you may consider using AWS cil
~~~ 
aws athena list-data-catalogs  
~~~
https://docs.aws.amazon.com/cli/latest/reference/athena/list-data-catalogs.html

or boto3.
https://boto3.amazonaws.com/v1/documentation/api/latest/reference/services/athena.html#Athena.Client.list_data_catalogs

Athena | Cross Account Access to Connector

Relevant content