JWT credentials - Amazon Athena
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

JWT credentials

With this authentication type, you can use a JSON web token (JWT) obtained from an external identity provider as a connection parameter to authenticate with Athena. The external credentials provider must already be federated with Amazon.

Credentials provider

The credentials provider that will be used to authenticate requests to Amazon. Set the value of this parameter to JWT.

Parameter name Alias Parameter type Default value Value to use
CredentialsProvider AWSCredentialsProviderClass (deprecated) Required none JWT

JWT web identity token

The JWT token obtained from an external federated identity provider. This token will be used to authenticate with Athena.

Parameter name Alias Parameter type Default value
JwtWebIdentityToken web_identity_token (deprecated) Required none

JWT role ARN

The Amazon Resource Name (ARN) of the role to assume. For information about assuming roles, see AssumeRole in the Amazon Security Token Service API Reference.

Parameter name Alias Parameter type Default value
JwtRoleArn role_arn (deprecated) Required none

JWT role session name

The name of the session when you use JWT credentials for authentication. The name can be any name that you choose.

Parameter name Alias Parameter type Default value
JwtRoleSessionName role_session_name (deprecated) Required none

Role session duration

The duration, in seconds, of the role session. For more information, see AssumeRoleWithWebIdentity in the Amazon Security Token Service API Reference.

Parameter name Alias Parameter type Default value
RoleSessionDuration Duration (deprecated) Optional 3600