Permissions - Precisely Data Integrity Suite

Data Integrity Suite
Product
Spatial_Analytics
Data_Integration
Data_Enrichment
Data_Governance
Precisely_Data_Integrity_Suite
geo_addressing_1
Data_Observability
Data_Quality
dis_core_foundation
Services
Spatial Analytics
Data Integration
Data Enrichment
Data Governance
Geo Addressing
Data Observability
Data Quality
Core Foundation
ft:title
Data Integrity Suite
ft:locale
en-US
PublicationType
pt_product_guide
copyrightfirst
2000
copyrightlast
2026

Connecting to AWS Athena requires an IAM user or role with sufficient permissions to query Athena and access the associated S3 buckets and Glue Data Catalog.

Note: The metadata extraction is available only with Advanced Connectivity Bundle (ACB) entitlement.

Required IAM permissions

The IAM user or role whose Access Key ID and Secret Access Key are used for the connection must have the following permissions granted via an IAM policy:

Athena permissions

  • athena:GetDatabase
  • athena:GetTableMetadata
  • athena:ListDatabases
  • athena:ListTableMetadata
  • athena:StartQueryExecution
  • athena:GetQueryExecution
  • athena:GetQueryResults
  • athena:StopQueryExecution

S3 permissions (query results bucket)

  • s3:GetObject
  • s3:PutObject
  • s3:DeleteObject
  • s3:ListBucket
  • s3:GetBucketLocation

These permissions must be granted on the S3 bucket configured in the S3 Location field of the connection, and on any S3 buckets that back the Athena tables you want to catalog.

AWS Glue Data Catalog permissions

  • glue:GetDatabase
  • glue:GetDatabases
  • glue:GetTable
  • glue:GetTables
  • glue:GetPartition
  • glue:GetPartitions

Creating an IAM policy

  1. Sign in to the AWS Management Console and navigate to IAM.
  2. Select Policies and click Create policy.
  3. Switch to the JSON tab and paste a policy granting the permissions listed above.
  4. Name the policy (for example, DIS-Athena-ReadPolicy) and save it.
  5. Attach the policy to the IAM user whose credentials will be used for the connection.
  6. From the IAM user's Security credentials tab, create an Access key and record the Access Key ID and Secret Access Key.