AWS::Athena::WorkGroup ResultConfiguration
The location in Amazon S3 where query and calculation results are stored and the encryption option, if any, used for query and calculation results. These are known as "client-side settings". If workgroup settings override client-side settings, then the query uses the workgroup settings.
Syntax
To declare this entity in your AWS CloudFormation template, use the following syntax:
JSON
{ "AclConfiguration" :
AclConfiguration
, "EncryptionConfiguration" :EncryptionConfiguration
, "ExpectedBucketOwner" :String
, "OutputLocation" :String
}
YAML
AclConfiguration:
AclConfiguration
EncryptionConfiguration:EncryptionConfiguration
ExpectedBucketOwner:String
OutputLocation:String
Properties
AclConfiguration
-
Indicates that an Amazon S3 canned ACL should be set to control ownership of stored query results. Currently the only supported canned ACL is
BUCKET_OWNER_FULL_CONTROL
. This is a client-side setting. If workgroup settings override client-side settings, then the query uses the ACL configuration that is specified for the workgroup, and also uses the location for storing query results specified in the workgroup. See EnforceWorkGroupConfiguration.Required: No
Type: AclConfiguration
Update requires: No interruption
EncryptionConfiguration
-
If query results are encrypted in Amazon S3, indicates the encryption option used (for example,
SSE_KMS
orCSE_KMS
) and key information. This is a client-side setting. If workgroup settings override client-side settings, then the query uses the encryption configuration that is specified for the workgroup, and also uses the location for storing query results specified in the workgroup. See EnforceWorkGroupConfiguration and Override client-side settings.Required: No
Type: EncryptionConfiguration
Update requires: No interruption
ExpectedBucketOwner
-
The account ID that you expect to be the owner of the Amazon S3 bucket specified by
ResultConfiguration:OutputLocation
. If set, Athena uses the value forExpectedBucketOwner
when it makes Amazon S3 calls to your specified output location. If theExpectedBucketOwner
account ID does not match the actual owner of the Amazon S3 bucket, the call fails with a permissions error.This is a client-side setting. If workgroup settings override client-side settings, then the query uses the
ExpectedBucketOwner
setting that is specified for the workgroup, and also uses the location for storing query results specified in the workgroup. See EnforceWorkGroupConfiguration.Required: No
Type: String
Pattern:
^[0-9]+$
Minimum:
12
Maximum:
12
Update requires: No interruption
OutputLocation
-
The location in Amazon S3 where your query results are stored, such as
s3://path/to/query/bucket/
. To run a query, you must specify the query results location using either a client-side setting for individual queries or a location specified by the workgroup. If workgroup settings override client-side settings, then the query uses the location specified for the workgroup. If no query location is set, Athena issues an error. For more information, see Work with query results and recent queries and EnforceWorkGroupConfiguration.Required: No
Type: String
Update requires: No interruption