To control access to capacity reservations, use resource-level IAM permissions or identity-based IAM policies. Whenever you use IAM policies, make sure that you follow IAM best practices. For more information, see Security best practices in IAM in the IAM User Guide.
The following procedure is specific to Athena.
For IAM-specific information, see the links listed at the end of this section. For information about example JSON capacity reservations policies, see Example capacity reservation policies.
To use the visual editor in the IAM console to create a capacity reservation policy
Sign in to the AWS Management Console and open the IAM console at https://console.aws.amazon.com/iam/
. -
In the navigation pane on the left, choose Policies, and then choose Create policy.
-
On the Visual editor tab, choose Choose a service. Then choose Athena to add to the policy.
-
Choose Select actions, and then choose the actions to add to the policy. The visual editor shows the actions available in Athena. For more information, see Actions, resources, and condition keys for Amazon Athena in the Service Authorization Reference.
-
Choose add actions to type a specific action or use wild card characters (*) to specify multiple actions.
By default, the policy that you are creating allows the actions that you choose. If you chose one or more actions that support resource-level permissions to the
capacity-reservationresource in Athena, then the editor lists thecapacity-reservationresource. -
Choose Resources to specify the specific capacity reservations for your policy. For example JSON capacity reservation policies, see Example capacity reservation policies.
-
Specify the
capacity-reservationresource as follows:arn:aws:athena:<region>:<user-account>:capacity-reservation/<capacity-reservation-name> -
Choose Review policy, and then type a Name and a Description (optional) for the policy that you are creating. Review the policy summary to make sure that you granted the intended permissions.
-
Choose Create policy to save your new policy.
-
Attach this identity-based policy to a user, a group, or role.
For more information, see the following topics in the Service Authorization Reference and IAM User Guide:
For example JSON capacity reservation policies, see Example capacity reservation policies.
For a complete list of Amazon Athena actions, see the API action names in the Amazon Athena API Reference.
