AWS athena documentation change
Summary
Added clarification that Lambda environment properties only apply when using the connector with a Lambda function in your account, and updated terminology from 'Glue connections' to 'AWS Glue Data Catalog federated connection' in three bullet points about credential storage, multiplexing handler support, and ConnectionSchemaVersion support.
Security assessment
The changes are documentation clarifications and terminology updates. The requirement to use AWS Secrets Manager for credentials was already present in the original text; this change only clarifies that this requirement applies specifically to AWS Glue Data Catalog federated connections. No evidence of addressing a specific security vulnerability or incident.
Diff
diff --git a/athena/latest/ug/connectors-dynamodb.md b/athena/latest/ug/connectors-dynamodb.md index a745712e6..3ebe3c504 100644 --- a//athena/latest/ug/connectors-dynamodb.md +++ b//athena/latest/ug/connectors-dynamodb.md @@ -42,0 +43,2 @@ Use the following command to get the schema for a Glue connection object. This s +The following Lambda environment properties apply only when you use the connector with a Lambda function in your account. + @@ -47 +49 @@ glue_connection – Specifies the name of the Glue connection associated with th - * All connectors that use Glue connections must use AWS Secrets Manager to store credentials. + * All connectors that use a AWS Glue Data Catalog federated connection must use AWS Secrets Manager to store credentials. @@ -49 +51 @@ glue_connection – Specifies the name of the Glue connection associated with th - * The DynamoDB connector created using Glue connections does not support the use of a multiplexing handler. + * The DynamoDB connector created using a AWS Glue Data Catalog federated connection does not support the use of a multiplexing handler. @@ -51 +53 @@ glue_connection – Specifies the name of the Glue connection associated with th - * The DynamoDB connector created using Glue connections only supports `ConnectionSchemaVersion` 2. + * The DynamoDB connector created using a AWS Glue Data Catalog federated connection only supports `ConnectionSchemaVersion` 2.