AWS athena documentation change

Service: athena · 2026-06-07 · Documentation low

File: athena/latest/ug/jdbc-v3-driver-datazone-iamcp.md

Summary

Renamed credentials provider from 'DataZone IAM' to 'SageMaker IAM', added DataZone project identifier parameter, and made environment identifier optional when project ID is provided.

Security assessment

The changes document authentication improvements using SageMaker Unified Studio and IAM credentials. While it enhances security documentation by detailing credential providers and scoped access, there's no evidence of addressing a specific vulnerability.

Diff

diff --git a/athena/latest/ug/jdbc-v3-driver-datazone-iamcp.md b/athena/latest/ug/jdbc-v3-driver-datazone-iamcp.md
index 049f7e82c..bac727b5f 100644
--- a//athena/latest/ug/jdbc-v3-driver-datazone-iamcp.md
+++ b//athena/latest/ug/jdbc-v3-driver-datazone-iamcp.md
@@ -7 +7 @@
-DataZone domain identifierDataZone environment identifierDataZone domain regionDataZone endpoint overrideUserPassword
+Credentials providerDataZone domain identifierDataZone project identifierDataZone environment identifierDataZone domain regionDataZone endpoint overrideUserPassword
@@ -9 +9 @@ DataZone domain identifierDataZone environment identifierDataZone domain regionD
-# DataZone IAM Credentials Provider
+# SageMaker IAM Credentials Provider
@@ -11 +11,9 @@ DataZone domain identifierDataZone environment identifierDataZone domain regionD
-An authentication mechanism that uses IAM credentials to connect to DataZone-governed data in Athena.
+An authentication plugin that uses IAM credentials to connect to Amazon Athena through SageMaker Unified Studio. This plugin authenticates using IAM credentials (static access key/secret key or the AWS default credential chain) and retrieves Athena connection credentials via the SageMaker connection service.
+
+## Credentials provider
+
+The credentials provider that will be used to authenticate requests to AWS. Set the value of this parameter to `SageMakerIam`.
+
+Parameter name | Alias | Parameter type | Default value | Value to use  
+---|---|---|---|---  
+CredentialsProvider | AWSCredentialsProviderClass (deprecated), DataZoneIam | Required | none | SageMakerIam  
@@ -20,0 +29,8 @@ DataZoneDomainId | none | Required | none
+## DataZone project identifier
+
+Identifier of the DataZone project to use.
+
+Parameter name | Alias | Parameter type | Default value  
+---|---|---|---  
+DataZoneProjectId | none | Optional | none  
+  
@@ -23 +39 @@ DataZoneDomainId | none | Required | none
-Identifier of the DataZone environment to use.
+Identifier of the DataZone environment to use. Required if `DataZoneProjectId` is not specified.
@@ -27 +43 @@ Parameter name | Alias | Parameter type | Default value
-DataZoneEnvironmentId | none | Required | none  
+DataZoneEnvironmentId | none | Optional | none  
@@ -67 +83 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please
-DataZone IdC
+SageMaker Browser IDC