AWS athena documentation change
Summary
Added Glue connections configuration guidance for Db2 AS/400 connector, including credential storage requirements in Secrets Manager and casing mode parameter documentation.
Security assessment
Explicitly requires AWS Secrets Manager for credentials (security enhancement) but does not resolve a specific security vulnerability. The change documents security practices rather than addressing an exploit.
Diff
diff --git a/athena/latest/ug/connectors-ibm-db2-as400.md b/athena/latest/ug/connectors-ibm-db2-as400.md index 7307a6402..4bd27badf 100644 --- a//athena/latest/ug/connectors-ibm-db2-as400.md +++ b//athena/latest/ug/connectors-ibm-db2-as400.md @@ -70 +70,36 @@ The parameter names and definitions listed below are for Athena data source conn -### Connection string +We recommend that you configure a Db2 AS/400 connector by using a Glue connections object. To do this, set the `glue_connection` environment variable of the Db2 AS/400 connector Lambda to the name of the Glue connection to use. + +**Glue connections properties** + +Use the following command to get the schema for a Glue connection object. This schema contains all the parameters that you can use to control your connection. + + + aws glue describe-connection-type --connection-type DB2AS400 + +**Lambda environment properties** + + * glue_connection – Specifies the name of the Glue connection associated with the federated connector. + + * **casing_mode** – (Optional) Specifies how to handle casing for schema and table names. The `casing_mode` parameter uses the following values to specify the behavior of casing: + + * **none** – Do not change case of the given schema and table names. This is the default for connectors that have an associated glue connection. + + * **upper** – Upper case all given schema and table names. + + * **lower** – Lower case all given schema and table names. + + + + +###### Note + + * All connectors that use Glue connections must use AWS Secrets Manager to store credentials. + + * The Db2 AS/400 connector created using Glue connections does not support the use of a multiplexing handler. + + * The Db2 AS/400 connector created using Glue connections only supports `ConnectionSchemaVersion` 2. + + + + +#### Connection string @@ -77 +112 @@ Use a JDBC connection string in the following format to connect to a database in -### Using a multiplexing handler +#### Using a multiplexing handler @@ -87 +122 @@ Record handler | `Db2MuxRecordHandler` -#### Multiplexing handler parameters +##### Multiplexing handler parameters @@ -103 +138 @@ Property | Value -#### Providing credentials +##### Providing credentials @@ -136 +171 @@ The connector uses the secret name to retrieve secrets and provide the user name -### Using a single connection handler +#### Using a single connection handler @@ -146 +181 @@ Record handler | `Db2RecordHandler` -#### Single connection handler parameters +##### Single connection handler parameters @@ -160 +195 @@ Property | Value -### Spill parameters +#### Spill parameters