How can I secure an Athena datasource only applies for a particular Schema specified in the dataset?

Q&A
, , ,
1

I have several namespaces and each namespace has their own Athena datasource. So each of these namespaces has there own datasets. I need to ensure that the datasets(for a particular namespace) physical table datasource arn has the matching or only works for the Athena schema? It seems not secure coz when defining an Athena datasource, it does not specify parameter for a schema. So in the dataset, you can specify the datasource arn and the schema could be from another namespace.

2

Hi @alltej,

Thank you for your question, this raises a solid security question; I came across the documentation below that could be helpful in your scenario. I’m wondering if this could be handled by a combination of AIM and Lake Formation permissions and Glue. Let me know if this process could help in your case or if you have any additional questions!
Use Amazon Athena and Amazon QuickSight in a cross-account environment | AWS Big Data Blog?