AWS Athena

Version: 1.1
Updated: Jun 15, 2023

Amazon Athena is a cloud-based service that enables you to run SQL queries on data stored in Amazon S3 without the need to set up any infrastructure. It is a serverless, pay-per-query service that makes it easy to analyze large amounts of data.

Run Query (Enrichment) - The action runs the SQL query statements contained in the Query and retrieve the results from the query.
Start Query (Enrichment) - Start a query execution.
Get Query Execution (Enrichment) - Returns the details of a single query execution or a list of up to 50 query executions.
Get Query Results (Enrichment) - Streams the results of a single query execution specified by the Query Execution ID.
Cancel Query (Enrichment) - Stops a query execution.
List Databases (Enrichment) - Lists the databases in the specified data catalog.
List Workgroups (Enrichment) - Lists available workgroups for the account.
List Table Metadata (Enrichment) - Lists the metadata for the tables in the specified data catalog database.

Amazon Athena configuration

To get access key and secret access key, you will need to follow these steps:

Sign in to your AWS Management Console.
Click on your account name in the top-right corner of the screen and select My Security Credentials from the drop-down menu.
Click on the Access keys section in the left-hand menu.
Click on the Create New Access Key button.
Your new access key and secret access key will be displayed on the screen. Make sure to copy and save them in a secure location as you will not be able to access them again.

Amazon Athena in Automation Service and Cloud SOAR

Access integrations in the Automation Service or Cloud SOAR.
After the list of the integrations appears, search for the integration and click on the row.
The integration details will appear. Click on the "+" button to add new Resource.
Populate all the required fields (*) and then click SAVE.
- Label. The desired name for the resource.
- AWS Region. Your AWS region. (Default: us-east-2).
- Access Key ID. Your Access Key ID.
- Secret Access Key. Your Secret Access Key.
To make sure the resource is working, hover over the resource and then click the pencil icon that appears on the right.
Click TEST SAVED SETTINGS.
You should receive a successful notification in the bottom right corner.