AWS Security ChangesHomeSearch

AWS athena documentation change

Service: athena · 2025-08-13 · Documentation low

File: athena/latest/ug/connectors-sap-hana.md

Summary

Added Glue connections configuration guidance, casing_mode parameter documentation, and security notes about AWS Secrets Manager usage.

Security assessment

The change enforces AWS Secrets Manager for credentials and adds security-related notes, but there is no evidence of addressing a specific existing vulnerability. This improves security documentation by mandating secure credential storage.

Diff

diff --git a/athena/latest/ug/connectors-sap-hana.md b/athena/latest/ug/connectors-sap-hana.md
index 64dc01517..65ef7a0a0 100644
--- a//athena/latest/ug/connectors-sap-hana.md
+++ b//athena/latest/ug/connectors-sap-hana.md
@@ -74 +74,36 @@ The parameter names and definitions listed below are for Athena data source conn
-### Connection string
+We recommend that you configure a SAP HANA connector by using a Glue connections object. To do this, set the `glue_connection` environment variable of the SAP HANA connector Lambda to the name of the Glue connection to use.
+
+**Glue connections properties**
+
+Use the following command to get the schema for a Glue connection object. This schema contains all the parameters that you can use to control your connection.
+    
+    
+    aws glue describe-connection-type --connection-type SAPHANA
+
+**Lambda environment properties**
+
+  * glue_connection – Specifies the name of the Glue connection associated with the federated connector. 
+
+  * **casing_mode** – (Optional) Specifies how to handle casing for schema and table names. The `casing_mode` parameter uses the following values to specify the behavior of casing:
+
+    * **none** – Do not change case of the given schema and table names. This is the default for connectors that have an associated glue connection. 
+
+    * **upper** – Upper case all given schema and table names.
+
+    * **lower** – Lower case all given schema and table names.
+
+
+
+
+###### Note
+
+  * All connectors that use Glue connections must use AWS Secrets Manager to store credentials.
+
+  * The SAP HANA connector created using Glue connections does not support the use of a multiplexing handler.
+
+  * The SAP HANA connector created using Glue connections only supports `ConnectionSchemaVersion` 2.
+
+
+
+
+#### Connection string
@@ -81 +116 @@ Use a JDBC connection string in the following format to connect to a database in
-### Using a multiplexing handler
+#### Using a multiplexing handler
@@ -91 +126 @@ Record handler | `SaphanaMuxRecordHandler`
-#### Multiplexing handler parameters
+##### Multiplexing handler parameters
@@ -106 +141 @@ Property | Value
-#### Providing credentials
+##### Providing credentials
@@ -141 +176 @@ Currently, the SAP HANA connector recognizes the `user` and `password` JDBC prop
-### Using a single connection handler
+#### Using a single connection handler
@@ -151 +186 @@ Record handler | `SaphanaRecordHandler`
-#### Single connection handler parameters
+##### Single connection handler parameters
@@ -165 +200 @@ Property | Value
-### Spill parameters
+#### Spill parameters