On this page

Athena Ingestion

Configure Statsig data warehouse ingestion from Amazon Athena, including authentication, scheduled queries, and mapping to events and properties.

How Athena ingestion works

Statsig ingests your event and metric data from Amazon Athena so it flows into your Statsig metrics and experiments. To set up a connection with Athena, Statsig needs the following:

  • Region
  • Athena access permissions granted to a Statsig-owned service account

Instead of granting access permissions to a Statsig-owned service account, you can provide the following:

  • IAM User Access Key
  • IAM Secret Access Key

The IAM user must have permissions to query from Athena. The following is a sample policy with the required permissions:

plaintext
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": [
                "athena:StartQueryExecution",
                "athena:GetQueryExecution",
                "athena:GetQueryResults",
                "athena:CreatePreparedStatement",
                "athena:DeletePreparedStatement",
                "athena:GetPreparedStatement",
                "athena:GetQueryResultsStream",
                "s3:GetObject",
                "s3:ListBucket",
                "s3:GetBucketLocation",
                "glue:GetTable",
                "glue:GetDatabase"
            ],
            "Resource": [
                "arn:aws:athena:*:<ACCOUNT_ID>:workgroup/*",
                "arn:aws:glue:<REGION>:<ACCOUNT_ID>:*"
            ]
        }
    ]
}

Was this helpful?