Configure and deploy resources using Amazon CloudFormation - Amazon Athena
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Configure and deploy resources using Amazon CloudFormation

You can configure and deploy resources using Amazon CloudFormation templates to start using Trusted Identity Propagation with Athena drivers as following.

  1. Download an Amazon CloudFormation template to set up the IAM Identity Center customer managed application and access roles along with workgroup and IAM Identity Center application tags. You can download it from this Amazon CloudFormation template link.

  2. Run the create-stack Amazon CLI command to deploy the Amazon CloudFormation stack that will provision the configured resources as following.

    aws cloudformation create-stack \
    --stack-name my-stack \
    --template-url URL_of_the_file_that_contains_the_template_body \
    --parameters file://params.json

  3. To view the status of the resources provisioning, navigate to the Amazon CloudFormation console. After the cluster creation completes, view the new IAM Identity Center application in Identity Center console. You can view the IAM roles in the IAM console.

    The tags will be associated in Workgroup as well as IAM Identity Center application.

  4. Using the created roles and application, you can use the Athena drivers immediately. To use JDBC driver, see JDBC auth plugin connection parameters. To use ODBC driver, see ODBC auth plugin connection parameters.