aws-athena-query-string-config
Athena SQL text is retained and can contain literal credentials or sensitive predicates.
Where it sits
| location | GetQueryExecution.QueryExecution.Query |
|---|
| location kind | query_text |
|---|
| data kinds | credential password api_key sensitive_data pii |
|---|
| emits edge | ContainsSecret |
|---|
| service | Athena (aws:athena) |
|---|
Collection recipe
| access mode | read_api |
|---|
| operation | GetQueryExecution |
|---|
| response path | QueryExecution.Query |
|---|
| encoding | string |
|---|
| params | {"QueryExecutionId": "\u003cquery-execution-id\u003e"} |
|---|
Required permissions
athena:GetQueryExecution
References