AWS athena documentation change
Summary
Expanded documentation for credential_source parameter to include Ec2InstanceMetadata, EcsContainer, and Environment options with usage guidance
Security assessment
The change adds documentation about authentication methods and credential sources, which are security features. It provides guidance on using different credential sources securely but doesn't address any specific security vulnerability.
Diff
diff --git a/athena/latest/ug/odbc-v2-driver-iam-profile.md b/athena/latest/ug/odbc-v2-driver-iam-profile.md index e3dd98f37..94f0909c3 100644 --- a//athena/latest/ug/odbc-v2-driver-iam-profile.md +++ b//athena/latest/ug/odbc-v2-driver-iam-profile.md @@ -9 +9,12 @@ Authentication typeAWS profilePreferred roleSession durationPlugin name -You can configure a named profile to connect to Amazon Athena using the ODBC driver. To use the credentials available in your hosting Amazon EC2 instance profile, set the `credential_source` parameter to `Ec2InstanceMetadata`. If you want to use a custom credentials provider in a named profile, specify a value for the `plugin_name` parameter in your profile configuration. +You can configure a named profile to connect to Amazon Athena using the ODBC driver. You can use a named profile with one of the following credential sources: + + * `Ec2InstanceMetadata` – Retrieves credentials from the Amazon EC2 Instance Metadata Service (IMDS). Use this when running on an Amazon EC2 instance. + + * `EcsContainer` – Retrieves credentials from the Amazon ECS Task Role endpoint. Use this when running in an Amazon ECS container. + + * `Environment` – Retrieves credentials from environment variables (`AWS_ACCESS_KEY_ID`, `AWS_SECRET_ACCESS_KEY`, `AWS_SESSION_TOKEN`). + + + + +Set the `credential_source` parameter in your AWS profile configuration to the appropriate value for your environment. If you want to use a custom credentials provider in a named profile, specify a value for the `plugin_name` parameter in your profile configuration.