DataZone IdC Credentials Provider - Amazon Athena

DataZone IdC Credentials Provider

An authentication mechanism that enables connecting to DataZone-governed data in Athena using IAM Identity Center.

Credentials provider

The credentials provider that will be used to authenticate requests to AWS. Set the value of this parameter to DataZoneIdc. Note that the AWSCredentialsProviderClass alias is deprecated; use the CredentialsProvider parameter name instead.

Parameter name Alias Parameter type Default value Value to use
CredentialsProvider AWSCredentialsProviderClass (deprecated) Required none DataZoneIdc

DataZone domain identifier

Identifier of the DataZone domain to use.

Parameter name Alias Parameter type Default value
DataZoneDomainId none Required none

DataZone environment identifier

Identifier of the DataZone environment to use.

Parameter name Alias Parameter type Default value
DataZoneEnvironmentId none Required none

DataZone domain region

The AWS Region where your DataZone domain is provisioned.

Parameter name Alias Parameter type Default value
DataZoneDomainRegion none Required none

Region

The AWS Region where your DataZone environment and Athena workgroup are provisioned.

Parameter name Alias Parameter type Default value
Region none Required none

IAM Identity Center issuer URL

The issuer URL of the IAM Identity Center instance that the DataZone domain uses.

Parameter name Alias Parameter type Default value
IdentityCenterIssuerUrl none Required none

DataZone endpoint override

The DataZone API endpoint to be used instead of the default for the provided AWS Region.

Parameter name Alias Parameter type Default value
DataZoneEndpointOverride none Optional none

Enable token caching

When enabled, allows the same IAM Identity Center access token to be used across driver connections. This prevents SQL tools that create multiple driver connections from launching multiple browser windows. If you enable this parameter, we recommend that you close the SQL tool immediately after using it to clear the token cache and require re-authentication.

Parameter name Alias Parameter type Default value
EnableTokenCaching none Optional FALSE

Listen port

The port number that listens for the IAM Identity Center response.

Parameter name Alias Parameter type Default value
ListenPort none Optional 8000

Identity provider response time out

The duration, in seconds, before the driver stops waiting for the response from IAM Identity Center.

Parameter name Alias Parameter type Default value
IdpResponseTimeout none Optional 120