Which compliance frameworks require ensure athena access is controlled via iam policies?

This security check is required by the following compliance frameworks: SOC 2, Least Privilege, NIST 800-53.

MEDIUM

Ensure Athena access is controlled via IAM policies

IAM policies should implement least privilege for Athena access, restricting which databases and workgroups users can access.

Security Impact

Overly permissive access allows unauthorized querying of sensitive data and excessive query costs.

How to Remediate

Create IAM policies that restrict Athena access by workgroup, database, and catalog. Use resource-based conditions.

Affected Resources

AWS::IAM::PolicyAWS::Athena::WorkGroup

Compliance Frameworks

SOC 2Least PrivilegeNIST 800-53

How TigerGate Helps

TigerGate continuously monitors your AWS environment to detect and alert on this misconfiguration. Here's what our platform does for this specific check:

Continuous Scanning
Automatically scans all Amazon Athena resources across your AWS accounts every hour
Instant Alerts
Get notified via Slack, email, or webhooks when this misconfiguration is detected
One-Click Remediation
Fix this issue directly from the TigerGate dashboard with our guided remediation
Compliance Evidence
Automatically collect audit evidence for SOC 2, Least Privilege, NIST 800-53 compliance
Drift Detection
Get alerted if this configuration drifts back to an insecure state after remediation