AWS athena documentation change
Summary
Added clarification that Lambda environment properties only apply when using the connector with a Lambda function in your account, and updated terminology from 'Glue connections' to 'AWS Glue Data Catalog federated connection' in three bullet points about credential storage, multiplexing handler support, and ConnectionSchemaVersion support.
Security assessment
The changes are documentation clarifications and terminology updates. The requirement to use AWS Secrets Manager for credentials was already present in the original text; this change only clarifies that this requirement applies specifically to AWS Glue Data Catalog federated connections. No evidence of addressing a specific security vulnerability or incident.
Diff
diff --git a/athena/latest/ug/connectors-docdb.md b/athena/latest/ug/connectors-docdb.md index b82d6c23b..24707f902 100644 --- a//athena/latest/ug/connectors-docdb.md +++ b//athena/latest/ug/connectors-docdb.md @@ -52,0 +53,2 @@ Use the following command to get the schema for a Glue connection object. This s +The following Lambda environment properties apply only when you use the connector with a Lambda function in your account. + @@ -60 +62 @@ Use the following command to get the schema for a Glue connection object. This s - * All connectors that use Glue connections must use AWS Secrets Manager to store credentials. + * All connectors that use a AWS Glue Data Catalog federated connection must use AWS Secrets Manager to store credentials. @@ -62 +64 @@ Use the following command to get the schema for a Glue connection object. This s - * The DocumentDB connector created using Glue connections does not support the use of a multiplexing handler. + * The DocumentDB connector created using a AWS Glue Data Catalog federated connection does not support the use of a multiplexing handler. @@ -64 +66 @@ Use the following command to get the schema for a Glue connection object. This s - * The DocumentDB connector created using Glue connections only supports `ConnectionSchemaVersion` 2. + * The DocumentDB connector created using a AWS Glue Data Catalog federated connection only supports `ConnectionSchemaVersion` 2.