📝 AWS Athena Workgroup CloudWatch Metrics are not enabled 🟢

• Contextual name: 📝 Workgroup CloudWatch Metrics are not enabled 🟢
• ID: /ce/ca/aws/athena/workgroup-cloudwatch-metrics
• Located in: 📁 AWS Athena

Flags

• 🟢 Policy with categories
• 🟢 Policy with type
• 🟢 Production policy

Our Metadata

• Policy Type: COMPLIANCE_POLICY
• Policy Category:
  • RELIABILITY

Logic

• 🧠 prod.logic.yaml 🟢
  • 📕 AWS Athena Work Group
  • 🔌 AWS Athena Work Group - object.extracts.yaml
  • 🧪 test-data.json

Description

Open File

Description

Ensure that CloudWatch Metrics are enabled for the AWS Athena Workgroup. This setting provides visibility into query performance and operational behavior, enabling effective monitoring, diagnostics, and optimization.

Rationale

Enabling CloudWatch Metrics for Athena Workgroups allows for:

1. Performance Monitoring: Track indicators such as query execution time, data scanned, and bytes returned to identify inefficiencies and performance bottlenecks.
2. Operational Insights: Understand usage trends, monitor workgroup activity, and detect anomalies or abnormal query patterns.
3. Proactive Troubleshooting: Set up alarms and dashboards in CloudWatch based on Athena metrics to detect and respond to errors, timeouts, or degraded performance.

By enabling CloudWatch Metrics, administrators can proactively manage and optimize Athena workgroup performance, ensuring reliable and efficient query execution.

Impact

Enabling CloudWatch Metrics may incur additional costs, depending on the volume and frequency of metrics published.

... see more

Remediation

Open File

Remediation

From Command Line

To enable CloudWatch metrics for an AWS Athena Workgroup, use the update-work-group command and set PublishCloudWatchMetricsEnabled to true:

aws athena update-work-group 
--work-group-name {{work-group-name}} 
--configuration-updates '{"PublishCloudWatchMetricsEnabled": true}'

policy.yaml

Open File

Linked Framework Sections

Section	Sub Sections	Internal Rules	Policies	Flags
💼 AWS Foundational Security Best Practices v1.0.0 → 💼 [Athena.4] Athena workgroups should have logging enabled			1
💼 Cloudaware Framework → 💼 Logging and Monitoring Configuration			49
💼 Cloudaware Framework → 💼 System Configuration			24