Get AWS Glue source information

Get the connection properties that you need to configure from the AWS Glue administrator.

Note:

You don't need to create a connection object for

AWS Glue

. You provide this information when you configure the catalog source.

The following table describes the properties that you need:

Property	Description
Athena Connection	The Amazon Athena connection object.
Region	The Amazon Web Services region from where you want to run the catalog source job.
Authentication mode	Select the authentication type to connect to Amazon Web Services account. You can select one of the following authentication types: - Basic - Assume Role. - IAM Roles Anywhere

Basic authentication

This is the default method of authentication. Provide an access key and security key to access the Amazon Web Services account.

The following table describes the connection properties for basic authentication:

Property	Description
Access Key	The access key of the Amazon Web Services account.
Security Key	The security key of the Amazon Web Services account.

Assume Role authentication

Assume Role authentication allows a user or service temporarily inherit permissions from another role. Instead of using permanent credentials, you assume an IAM role to get temporary security credentials. This allows you to access AWS resources securely without sharing credentials.

Provide the IAM Role ARN and, optionally, provide the access key and security key to access the Amazon Web Services account.

Note:

Verify that the administrator granted the minimum user permission to access the

AWS Glue

and Amazon Athena source systems.

The following table describes the connection properties for Assume Role authentication:

Property	Description
IAM Role ARN	The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role that the user assumes to use. The user uses the dynamically generated temporary security credentials. For more information about how to get the ARN of an IAM role, see the AWS documentation.
Access Key	Optional. The access key of the Amazon Web Services account.
Security Key	Optional. The security key of the Amazon Web Services account.

IAM Roles Anywhere authentication

IAM Roles Anywhere authentication allows an external application, user, or system of AWS securely access AWS resources with the X.509 certificates instead of AWS login credentials. This makes it easier and safer to manage access across different environments.

You can provide the credential file path and profile name to access the Amazon Web Services account.

The following table describes the connection properties for IAM Roles Anywhere authentication:

Property	Description
Credential file path	The location of the file containing the credentials used to authenticate the user. For more information about how to get the AWS credential file path, see the AWS documentation.
Profile name	The profile name that you defined in the credential file for user authentication. If you don't provide the profile name, the authentication process uses the default profile.