AWS athena medium security documentation change
Summary
Added release notes for ODBC driver version 2.2.0.0 including new SageMaker authentication support, multi-catalog browsing, macOS universal installer, HTTP client migration to AWS CRT, and ExternalId support for STS AssumeRole.
Security assessment
The HTTP client migration removes libcurl dependency and uses platform-native TLS/trust store, reducing vulnerability surface. ExternalId support enhances cross-account role security by preventing confused deputy attacks. These are concrete security improvements.
Diff
diff --git a/athena/latest/ug/odbc-v2-driver-release-notes.md b/athena/latest/ug/odbc-v2-driver-release-notes.md index d50f81713..6a7c89c5b 100644 --- a//athena/latest/ug/odbc-v2-driver-release-notes.md +++ b//athena/latest/ug/odbc-v2-driver-release-notes.md @@ -7 +7 @@ -2.1.0.02.0.6.02.0.5.12.0.5.02.0.4.02.0.3.02.0.2.22.0.2.12.0.2.02.0.1.12.0.1.0 +2.2.0.02.1.0.02.0.6.02.0.5.12.0.5.02.0.4.02.0.3.02.0.2.22.0.2.12.0.2.02.0.1.12.0.1.0 @@ -12,0 +13,26 @@ These release notes provide details of enhancements, features, known issues, and +## 2.2.0.0 + +Released 2026-05-29 + +### Improvements + + * SageMaker authentication – Added support for the SageMaker authentication plugins `SageMakerBrowserIdc` and `SageMakerIam`. You can now connect to your SageMaker projects and work with the data from your preferred third-party tool. For more information, see [SageMaker Browser IDC](./odbc-v2-driver-sagemaker-idc.html) and [SageMaker IAM](./odbc-v2-driver-sagemaker-iam.html). + + * Multi-catalog browsing – Added multi-catalog browsing support for lakehouse features. The driver can now discover and connect to all catalogs in federated catalog environments, enabling use of S3 Tables and catalog federation through Amazon Athena. + + * macOS universal installer – The macOS driver is now distributed as a single universal binary that supports both ARM and Intel architectures, simplifying installation across all Mac hardware. + + * HTTP client migration – Removed the libcurl dependency from ODBC binaries by migrating to the AWS SDK CRT HTTP client. The CRT client uses the platform's native TLS stack and system trust store, improving connection reliability and eliminating transitive dependencies on OpenSSL and zlib. + + + + +### Fixes + + * Added `ExternalId` support for STS `AssumeRole` for cross-account role assumption. The `ExternalId` is read from the AWS profile configuration. + + + + +To download the new ODBC v2 driver, see [ODBC 2.x driver download](./odbc-v2-driver.html#odbc-v2-driver-download). For connection information, see [Amazon Athena ODBC 2.x](./odbc-v2-driver.html). On Windows, uninstall the previous version before upgrading to 2.2.0.0. +