On this page

Athena Ingestion

Configure Statsig data warehouse ingestion from Amazon Athena, including authentication, scheduled queries, and mapping to events and properties.

How Athena ingestion works

To set up a connection with Athena, Statsig needs the following:

  • Region
  • Athena access permissions granted to a Statsig-owned service account

Instead of granting access permissions to a Statsig-owned service account, you can provide the following:

  • IAM User Access Key
  • IAM Secret Access Key

The IAM user must have permissions to query from Athena. The following is a sample policy with the required permissions:

plaintext
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": [
                "athena:StartQueryExecution",
                "athena:GetQueryExecution",
                "athena:GetQueryResults",
                "athena:CreatePreparedStatement",
                "athena:DeletePreparedStatement",
                "athena:GetPreparedStatement",
                "athena:GetQueryResultsStream",
                "s3:GetObject",
                "s3:ListBucket",
                "s3:GetBucketLocation",
                "glue:GetTable",
                "glue:GetDatabase"
            ],
            "Resource": [
                "arn:aws:athena:*:<ACCOUNT_ID>:workgroup/*",
                "arn:aws:glue:<REGION>:<ACCOUNT_ID>:*"
            ]
        }
    ]
}

Was this helpful?