AWS athena medium security documentation change

Service: athena · 2026-07-01 · Security-related medium

File: athena/latest/ug/connect-to-a-data-source-permissions.md

Summary

Added s3:PutObject permission requirement for spill buckets with explanation

Security assessment

Corrects potentially insecure default configuration by explicitly requiring write permissions for spill buckets, preventing data processing failures that could lead to data exposure

Diff

diff --git a/athena/latest/ug/connect-to-a-data-source-permissions.md b/athena/latest/ug/connect-to-a-data-source-permissions.md
index 492124d99..0c9685e25 100644
--- a//athena/latest/ug/connect-to-a-data-source-permissions.md
+++ b//athena/latest/ug/connect-to-a-data-source-permissions.md
@@ -79,0 +80 @@ When you connect to a data source in a VPC, Athena creates an Elastic Network In
+                        "s3:PutObject",
@@ -111,0 +113,4 @@ Explanation of permissions **Allowed actions** | **Explanation** | **Required**
+                 "s3:PutObject"
+
+|  Allows the connector to write results to the spill bucket. Athena reads results from the spill bucket. |  Required  
+