Ping credentials - Amazon Athena
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Ping credentials

A SAML-based authentication mechanism that enables authentication to Athena using the Ping Federate identity provider. This method assumes that a federation has already been set up between Athena and Ping Federate.

Credentials provider

The credentials provider that will be used to authenticate requests to Amazon. Set the value of this parameter to Ping.

Parameter name Alias Parameter type Default value Value to use
CredentialsProvider AWSCredentialsProviderClass (deprecated) Required none Ping

User

The email address of the Ping Federate user to use for authentication with Ping Federate.

Parameter name Alias Parameter type Default value
User UID (deprecated) Required none

Password

The password for the Ping Federate user.

Parameter name Alias Parameter type Default value
Password PWD (deprecated) Required none

PingHostName

The address for your Ping server. To find your address, visit the following URL and view the SSO Application Endpoint field.

https://your-pf-host-#:9999/pingfederate/your-pf-app#/spConnections
Parameter name Alias Parameter type Default value
PingHostName IdP_Host (deprecated) Required none

PingPortNumber

The port number to use to connect to your IdP host.

Parameter name Alias Parameter type Default value
PingPortNumber IdP_Port (deprecated) Required none

PingPartnerSpId

The service provider address. To find the service provider address, visit the following URL and view the SSO Application Endpoint field.

https://your-pf-host-#:9999/pingfederate/your-pf-app#/spConnections
Parameter name Alias Parameter type Default value

PingPartnerSpId

Partner_SPID (deprecated) Required none

Preferred role

The Amazon Resource Name (ARN) of the role to assume. For information about ARN roles, see AssumeRole in the Amazon Security Token Service API Reference.

Parameter name Alias Parameter type Default value
PreferredRole preferred_role (deprecated) Optional none

Role session duration

The duration, in seconds, of the role session. For more information, see AssumeRole in the Amazon Security Token Service API Reference.

Parameter name Alias Parameter type Default value
RoleSessionDuration Duration (deprecated) Optional 3600

Lake Formation enabled

Specifies whether to use the AssumeDecoratedRoleWithSAML Lake Formation API action to retrieve temporary IAM credentials instead of the AssumeRoleWithSAML Amazon STS API action.

Parameter name Alias Parameter type Default value
LakeFormationEnabled none Optional FALSE