AWS Security ChangesHomeSearch

AWS athena documentation change

Service: athena · 2026-04-25 · Documentation low

File: athena/latest/ug/connectors-cwmetrics.md

Summary

Added clarification that Lambda environment properties only apply when using the connector with a Lambda function in your account, and updated terminology from 'Glue connections' to 'AWS Glue Data Catalog federated connection' in three bullet points.

Security assessment

The changes are documentation clarifications and terminology updates. The requirement to use AWS Secrets Manager for credentials was already present; the change only specifies this applies to 'AWS Glue Data Catalog federated connections' instead of generic 'Glue connections'. No evidence of addressing a specific security vulnerability.

Diff

diff --git a/athena/latest/ug/connectors-cwmetrics.md b/athena/latest/ug/connectors-cwmetrics.md
index 21d87661f..a3267844b 100644
--- a//athena/latest/ug/connectors-cwmetrics.md
+++ b//athena/latest/ug/connectors-cwmetrics.md
@@ -38,0 +39,2 @@ Use the following command to get the schema for a Glue connection object. This s
+The following Lambda environment properties apply only when you use the connector with a Lambda function in your account.
+
@@ -46 +48 @@ Use the following command to get the schema for a Glue connection object. This s
-  * All connectors that use Glue connections must use AWS Secrets Manager to store credentials.
+  * All connectors that use a AWS Glue Data Catalog federated connection must use AWS Secrets Manager to store credentials.
@@ -48 +50 @@ Use the following command to get the schema for a Glue connection object. This s
-  * The CloudWatch Metrics connector created using Glue connections does not support the use of a multiplexing handler.
+  * The CloudWatch Metrics connector created using a AWS Glue Data Catalog federated connection does not support the use of a multiplexing handler.
@@ -50 +52 @@ Use the following command to get the schema for a Glue connection object. This s
-  * The CloudWatch Metrics connector created using Glue connections only supports `ConnectionSchemaVersion` 2.
+  * The CloudWatch Metrics connector created using a AWS Glue Data Catalog federated connection only supports `ConnectionSchemaVersion` 2.