Setting up trusted identity propagation with Amazon Athena workgroups - Amazon IAM Identity Center
PrerequisitesSetting up trusted identity propagation with Athena
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Setting up trusted identity propagation with Amazon Athena workgroups

The following procedure walks you through setting up Amazon Athena workgroups for trusted identity propagation.

Prerequisites

Before you can get started with this tutorial, you'll need to set up the following:

  1. Enable IAM Identity Center. Organization instance is recommended. For more information, see Prerequisites and considerations.

  2. Provision the users and groups from your source of identities into IAM Identity Center.

  3. This configuration requires Amazon EMR Studio, Amazon Lake Formation, and Amazon S3 Access Grants.

Setting up trusted identity propagation with Athena

To set up trusted identity propagation with Athena, the Athena administrator must:

  1. Review Considerations and limitations in using IAM Identity Center enabled Athena workgroups.

  2. Create an IAM Identity Center enabled Athena workgroup.