AWS athena documentation change
Summary
Added Glue connection configuration guidance, casing_mode parameter documentation, and security notes requiring AWS Secrets Manager for credentials
Security assessment
The change mandates AWS Secrets Manager for credential storage and adds security-related constraints (no multiplexing handler support), but does not address a specific disclosed vulnerability. This enhances security posture through enforced credential management best practices.
Diff
diff --git a/athena/latest/ug/connectors-azure-synapse.md b/athena/latest/ug/connectors-azure-synapse.md index c69f67c0e..f1031f302 100644 --- a//athena/latest/ug/connectors-azure-synapse.md +++ b//athena/latest/ug/connectors-azure-synapse.md @@ -72 +72,36 @@ The parameter names and definitions listed below are for Athena data source conn -### Connection string +We recommend that you configure a Synapse connector by using a Glue connections object. To do this, set the `glue_connection` environment variable of the Synapse connector Lambda to the name of the Glue connection to use. + +**Glue connections properties** + +Use the following command to get the schema for a Glue connection object. This schema contains all the parameters that you can use to control your connection. + + + aws glue describe-connection-type --connection-type SYNAPSE + +**Lambda environment properties** + + * glue_connection – Specifies the name of the Glue connection associated with the federated connector. + + * **casing_mode** – (Optional) Specifies how to handle casing for schema and table names. The `casing_mode` parameter uses the following values to specify the behavior of casing: + + * **none** – Do not change case of the given schema and table names. This is the default for connectors that have an associated glue connection. + + * **upper** – Upper case all given schema and table names. + + * **lower** – Lower case all given schema and table names. + + + + +###### Note + + * All connectors that use Glue connections must use AWS Secrets Manager to store credentials. + + * The Synapse connector created using Glue connections does not support the use of a multiplexing handler. + + * The Synapse connector created using Glue connections only supports `ConnectionSchemaVersion` 2. + + + + +#### Connection string @@ -79 +114 @@ Use a JDBC connection string in the following format to connect to a database in -### Using a multiplexing handler +#### Using a multiplexing handler @@ -89 +124 @@ Record handler | `SynapseMuxRecordHandler` -#### Multiplexing handler parameters +##### Multiplexing handler parameters @@ -104 +139 @@ Property | Value -#### Providing credentials +##### Providing credentials @@ -137 +172 @@ The connector uses the secret name to retrieve secrets and provide the user name -### Using a single connection handler +#### Using a single connection handler @@ -147 +182 @@ Record handler | `SynapseRecordHandler` -#### Single connection handler parameters +##### Single connection handler parameters @@ -161 +196 @@ Property | Value -### Configuring Active Directory authentication +#### Configuring Active Directory authentication @@ -203 +238 @@ The Amazon Athena Azure Synapse connector supports Microsoft Active Directory Au -#### Modifying the connection string +##### Modifying the connection string @@ -219 +254 @@ For `secret_name`, specify the application or client ID as the username and the -### Spill parameters +#### Spill parameters