AWS athena documentation change
Summary
Replaced inline JSON policy definitions with links to AWS Managed Policy Reference documentation
Security assessment
The change removes verbose policy JSONs and directs users to official policy references, but does not introduce or modify security controls. This is a documentation maintenance change without security implications.
Diff
diff --git a/athena/latest/ug/managed-policies.md b/athena/latest/ug/managed-policies.md index 0eca09394..cddec3260 100644 --- a//athena/latest/ug/managed-policies.md +++ b//athena/latest/ug/managed-policies.md @@ -82,153 +82 @@ The `AmazonAthenaFullAccess` policy is grouped into the following sets of permis -JSON - - -**** - - - - { - "Version": "2012-10-17", - "Statement": [{ - "Sid": "BaseAthenaPermissions", - "Effect": "Allow", - "Action": [ - "athena:*" - ], - "Resource": [ - "*" - ] - }, - { - "Sid": "BaseGluePermissions", - "Effect": "Allow", - "Action": [ - "glue:CreateDatabase", - "glue:DeleteDatabase", - "glue:GetCatalog", - "glue:GetCatalogs", - "glue:GetDatabase", - "glue:GetDatabases", - "glue:UpdateDatabase", - "glue:CreateTable", - "glue:DeleteTable", - "glue:BatchDeleteTable", - "glue:UpdateTable", - "glue:GetTable", - "glue:GetTables", - "glue:BatchCreatePartition", - "glue:CreatePartition", - "glue:DeletePartition", - "glue:BatchDeletePartition", - "glue:UpdatePartition", - "glue:GetPartition", - "glue:GetPartitions", - "glue:BatchGetPartition", - "glue:StartColumnStatisticsTaskRun", - "glue:GetColumnStatisticsTaskRun", - "glue:GetColumnStatisticsTaskRuns", - "glue:GetCatalogImportStatus" - ], - "Resource": [ - "*" - ] - }, - { - "Sid": "BaseQueryResultsPermissions", - "Effect": "Allow", - "Action": [ - "s3:GetBucketLocation", - "s3:GetObject", - "s3:ListBucket", - "s3:ListBucketMultipartUploads", - "s3:ListMultipartUploadParts", - "s3:AbortMultipartUpload", - "s3:CreateBucket", - "s3:PutObject", - "s3:PutBucketPublicAccessBlock" - ], - "Resource": [ - "arn:aws:s3:::aws-athena-query-results-*" - ] - }, - { - "Sid": "BaseAthenaExamplesPermissions", - "Effect": "Allow", - "Action": [ - "s3:GetObject", - "s3:ListBucket" - ], - "Resource": [ - "arn:aws:s3:::athena-examples*" - ] - }, - { - "Sid": "BaseS3BucketPermissions", - "Effect": "Allow", - "Action": [ - "s3:ListBucket", - "s3:GetBucketLocation", - "s3:ListAllMyBuckets" - ], - "Resource": [ - "*" - ] - }, - { - "Sid": "BaseSNSPermissions", - "Effect": "Allow", - "Action": [ - "sns:ListTopics", - "sns:GetTopicAttributes" - ], - "Resource": [ - "*" - ] - }, - { - "Sid": "BaseCloudWatchPermissions", - "Effect": "Allow", - "Action": [ - "cloudwatch:PutMetricAlarm", - "cloudwatch:DescribeAlarms", - "cloudwatch:DeleteAlarms", - "cloudwatch:GetMetricData" - ], - "Resource": [ - "*" - ] - }, - { - "Sid": "BaseLakeFormationPermissions", - "Effect": "Allow", - "Action": [ - "lakeformation:GetDataAccess" - ], - "Resource": [ - "*" - ] - }, - { - "Sid": "BaseDataZonePermissions", - "Effect": "Allow", - "Action": [ - "datazone:ListDomains", - "datazone:ListProjects", - "datazone:ListAccountEnvironments" - ], - "Resource": [ - "*" - ] - }, - { - "Sid": "BasePricingPermissions", - "Effect": "Allow", - "Action": [ - "pricing:GetProducts" - ], - "Resource": [ - "*" - ] - } - ] - } - +To view the permissions for this policy, see [AmazonAthenaFullAccess](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AmazonAthenaFullAccess.html) in the AWS Managed Policy Reference. @@ -259,101 +107 @@ The `AWSQuicksightAthenaAccess` policy is grouped into the following sets of per -JSON - - -**** - - - - { - "Version": "2012-10-17", - "Statement": [{ - "Effect": "Allow", - "Action": [ - "athena:BatchGetQueryExecution", - "athena:CancelQueryExecution", - "athena:GetCatalogs", - "athena:GetExecutionEngine", - "athena:GetExecutionEngines", - "athena:GetNamespace", - "athena:GetNamespaces", - "athena:GetQueryExecution", - "athena:GetQueryExecutions", - "athena:GetQueryResults", - "athena:GetQueryResultsStream", - "athena:GetTable", - "athena:GetTables", - "athena:ListQueryExecutions", - "athena:RunQuery", - "athena:StartQueryExecution", - "athena:StopQueryExecution", - "athena:ListWorkGroups", - "athena:ListEngineVersions", - "athena:GetWorkGroup", - "athena:GetDataCatalog", - "athena:GetDatabase", - "athena:GetTableMetadata", - "athena:ListDataCatalogs", - "athena:ListDatabases", - "athena:ListTableMetadata" - ], - "Resource": [