You can configure permanent IAM credentials, EC2 instance profile, EC2 role to asssume role
authentication types to access Amazon Athena.
To use the permanent IAM credentials authentication, create an IAM user, attach the required policies, and generate the access and secret key in the AWS Console. Keep these details handy to use in the connection properties.
To use EC2 instance profile authentication, install the Secure Agent on the EC2 instance and attach the EC2 role to the EC2 instance.
To configure EC2 role to assume another IAM role, install the Secure Agent on the EC2
instance, attach the EC2 role to the EC2 instance, and enable the EC2 role to assume
another IAM role specified by the IAM Role ARN.
Before you configure the connection properties, create the minimal Amazon S3 policy, AWS Glue data catalog policy, and the Amazon Athena policies. Define the required permissions for the IAM user or EC2 role in the policies.
Attach the policies to the IAM user or EC2 role based on the authentication type that you want to configure.