This is the new *CloudFormation Template Reference Guide*. Please update your bookmarks and links. For help getting started with CloudFormation, see the [AWS CloudFormation User Guide](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/Welcome.html).

# AWS::Athena::WorkGroup
<a name="aws-resource-athena-workgroup"></a>

The AWS::Athena::WorkGroup resource specifies an Amazon Athena workgroup, which contains a name, description, creation time, state, and other configuration, listed under [WorkGroupConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-workgroup.html#cfn-athena-workgroup-workgroupconfiguration). Each workgroup enables you to isolate queries for you or your group from other queries in the same account. For more information, see [CreateWorkGroup](https://docs.aws.amazon.com/athena/latest/APIReference/API_CreateWorkGroup.html) in the *Amazon Athena API Reference*.

## Syntax
<a name="aws-resource-athena-workgroup-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-resource-athena-workgroup-syntax.json"></a>

```
{
  "Type" : "AWS::Athena::WorkGroup",
  "Properties" : {
      "[Description](#cfn-athena-workgroup-description)" : String,
      "[Name](#cfn-athena-workgroup-name)" : String,
      "[RecursiveDeleteOption](#cfn-athena-workgroup-recursivedeleteoption)" : Boolean,
      "[State](#cfn-athena-workgroup-state)" : String,
      "[Tags](#cfn-athena-workgroup-tags)" : [ Tag, ... ],
      "[WorkGroupConfiguration](#cfn-athena-workgroup-workgroupconfiguration)" : WorkGroupConfiguration
    }
}
```

### YAML
<a name="aws-resource-athena-workgroup-syntax.yaml"></a>

```
Type: AWS::Athena::WorkGroup
Properties:
  [Description](#cfn-athena-workgroup-description): String
  [Name](#cfn-athena-workgroup-name): String
  [RecursiveDeleteOption](#cfn-athena-workgroup-recursivedeleteoption): Boolean
  [State](#cfn-athena-workgroup-state): String
  [Tags](#cfn-athena-workgroup-tags): 
    - Tag
  [WorkGroupConfiguration](#cfn-athena-workgroup-workgroupconfiguration): 
    WorkGroupConfiguration
```

## Properties
<a name="aws-resource-athena-workgroup-properties"></a>

`Description`  <a name="cfn-athena-workgroup-description"></a>
The workgroup description.  
*Required*: No  
*Type*: String  
*Minimum*: `0`  
*Maximum*: `1024`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`Name`  <a name="cfn-athena-workgroup-name"></a>
The workgroup name.  
*Required*: Yes  
*Type*: String  
*Pattern*: `[a-zA-Z0-9._-]{1,128}`  
*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)

`RecursiveDeleteOption`  <a name="cfn-athena-workgroup-recursivedeleteoption"></a>
The option to delete a workgroup and its contents even if the workgroup contains any named queries. The default is false.  
*Required*: No  
*Type*: Boolean  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`State`  <a name="cfn-athena-workgroup-state"></a>
The state of the workgroup: ENABLED or DISABLED.  
*Required*: No  
*Type*: String  
*Allowed values*: `ENABLED | DISABLED`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`Tags`  <a name="cfn-athena-workgroup-tags"></a>
The tags (key-value pairs) to associate with this resource.  
*Required*: No  
*Type*: Array of [Tag](aws-properties-athena-workgroup-tag.md)  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`WorkGroupConfiguration`  <a name="cfn-athena-workgroup-workgroupconfiguration"></a>
The configuration of the workgroup, which includes the location in Amazon S3 where query results are stored, the encryption option, if any, used for query results, whether Amazon CloudWatch Metrics are enabled for the workgroup, and the limit for the amount of bytes scanned (cutoff) per query, if it is specified. The [EnforceWorkGroupConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfiguration.html#cfn-athena-workgroup-workgroupconfiguration-enforceworkgroupconfiguration) option determines whether workgroup settings override client-side query settings.  
*Required*: No  
*Type*: [WorkGroupConfiguration](aws-properties-athena-workgroup-workgroupconfiguration.md)  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

## Return values
<a name="aws-resource-athena-workgroup-return-values"></a>

### Ref
<a name="aws-resource-athena-workgroup-return-values-ref"></a>

When you pass the logical ID of this resource to the intrinsic `Ref` function, `Ref` returns the name of the WorkGroup. For example:

 `{ "Ref": "myWorkGroup" }` 

For more information about using the `Ref` function, see [https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-ref.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-ref.html).

### Fn::GetAtt
<a name="aws-resource-athena-workgroup-return-values-fn--getatt"></a>

The `Fn::GetAtt` intrinsic function returns a value for a specified attribute of this type. The following are the available attributes and sample return values.

For more information about using the `Fn::GetAtt` intrinsic function, see [https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-getatt.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-getatt.html).

#### 
<a name="aws-resource-athena-workgroup-return-values-fn--getatt-fn--getatt"></a>

`CreationTime`  <a name="CreationTime-fn::getatt"></a>
The date and time the workgroup was created, as a UNIX timestamp in seconds. For example: `1582761016`.

`WorkGroupConfiguration.EngineVersion.EffectiveEngineVersion`  <a name="WorkGroupConfiguration.EngineVersion.EffectiveEngineVersion-fn::getatt"></a>
Property description not available.

`WorkGroupConfigurationUpdates.EngineVersion.EffectiveEngineVersion`  <a name="WorkGroupConfigurationUpdates.EngineVersion.EffectiveEngineVersion-fn::getatt"></a>
The Athena engine version for running queries, or the PySpark engine version for running sessions.

## Examples
<a name="aws-resource-athena-workgroup--examples"></a>

### Create or update an Athena workgroup
<a name="aws-resource-athena-workgroup--examples--Create_or_update_an_Athena_workgroup"></a>

The following example template creates or updates the Athena workgroup `MyCustomWorkGroup`.

#### JSON
<a name="aws-resource-athena-workgroup--examples--Create_or_update_an_Athena_workgroup--json"></a>

```
{
    "Resources":{
        "MyAthenaWorkGroup":{
            "Type":"AWS::Athena::WorkGroup",
            "Properties":{
                "Name":"MyCustomWorkGroup",
                "Description":"My WorkGroup",
                "State":"ENABLED",
                "Tags":[
                    {
                        "Key":"key1",
                        "Value":"value1"
                    },
                    {
                        "Key":"key2",
                        "Value":"value2"
                    }
                ],
                "WorkGroupConfiguration":{
                    "BytesScannedCutoffPerQuery":200000000,
                    "EnforceWorkGroupConfiguration":false,
                    "PublishCloudWatchMetricsEnabled":false,
                    "RequesterPaysEnabled":true,
                    "ResultConfiguration":{
                        "OutputLocation":"s3://path/to/my/bucket/"
                    }
                }
            }
        }
    }
}
```

#### YAML
<a name="aws-resource-athena-workgroup--examples--Create_or_update_an_Athena_workgroup--yaml"></a>

```
Resources:
  MyAthenaWorkGroup:
    Type: AWS::Athena::WorkGroup
    Properties:
      Name: MyCustomWorkGroup
      Description: My WorkGroup
      State: ENABLED
      Tags:
        - Key: "key1"
          Value: "value1"
        - Key: "key2"
          Value: "value2"
      WorkGroupConfiguration:
        BytesScannedCutoffPerQuery: 200000000
        EnforceWorkGroupConfiguration: false
        PublishCloudWatchMetricsEnabled: false
        RequesterPaysEnabled: true
        ResultConfiguration:
          OutputLocation: s3://path/to/my/bucket/
```

# AWS::Athena::WorkGroup AclConfiguration
<a name="aws-properties-athena-workgroup-aclconfiguration"></a>

Indicates that an Amazon S3 canned ACL should be set to control ownership of stored query results, including data files inserted by Athena as the result of statements like CTAS or INSERT INTO. When Athena stores query results in Amazon S3, the canned ACL is set with the `x-amz-acl` request header. For more information about S3 Object Ownership, see [Object Ownership settings](https://docs.aws.amazon.com/AmazonS3/latest/userguide/about-object-ownership.html#object-ownership-overview) in the *Amazon S3 User Guide*.

## Syntax
<a name="aws-properties-athena-workgroup-aclconfiguration-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-athena-workgroup-aclconfiguration-syntax.json"></a>

```
{
  "[S3AclOption](#cfn-athena-workgroup-aclconfiguration-s3acloption)" : String
}
```

### YAML
<a name="aws-properties-athena-workgroup-aclconfiguration-syntax.yaml"></a>

```
  [S3AclOption](#cfn-athena-workgroup-aclconfiguration-s3acloption): String
```

## Properties
<a name="aws-properties-athena-workgroup-aclconfiguration-properties"></a>

`S3AclOption`  <a name="cfn-athena-workgroup-aclconfiguration-s3acloption"></a>
The Amazon S3 canned ACL that Athena should specify when storing query results, including data files inserted by Athena as the result of statements like CTAS or INSERT INTO. Currently the only supported canned ACL is `BUCKET_OWNER_FULL_CONTROL`. If a query runs in a workgroup and the workgroup overrides client-side settings, then the Amazon S3 canned ACL specified in the workgroup's settings is used for all queries that run in the workgroup. For more information about Amazon S3 canned ACLs, see [Canned ACL](https://docs.aws.amazon.com/AmazonS3/latest/userguide/acl-overview.html#canned-acl) in the *Amazon S3 User Guide*.  
*Required*: Yes  
*Type*: String  
*Allowed values*: `BUCKET_OWNER_FULL_CONTROL`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

# AWS::Athena::WorkGroup Classification
<a name="aws-properties-athena-workgroup-classification"></a>

A classification refers to a set of specific configurations.

## Syntax
<a name="aws-properties-athena-workgroup-classification-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-athena-workgroup-classification-syntax.json"></a>

```
{
  "[Name](#cfn-athena-workgroup-classification-name)" : String,
  "[Properties](#cfn-athena-workgroup-classification-properties)" : {Key: Value, ...}
}
```

### YAML
<a name="aws-properties-athena-workgroup-classification-syntax.yaml"></a>

```
  [Name](#cfn-athena-workgroup-classification-name): String
  [Properties](#cfn-athena-workgroup-classification-properties): 
    Key: Value
```

## Properties
<a name="aws-properties-athena-workgroup-classification-properties"></a>

`Name`  <a name="cfn-athena-workgroup-classification-name"></a>
The name of the configuration classification.  
*Required*: No  
*Type*: String  
*Minimum*: `1`  
*Maximum*: `128`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`Properties`  <a name="cfn-athena-workgroup-classification-properties"></a>
A set of properties specified within a configuration classification.  
*Required*: No  
*Type*: Object of String  
*Pattern*: `^.+$`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

# AWS::Athena::WorkGroup CloudWatchLoggingConfiguration
<a name="aws-properties-athena-workgroup-cloudwatchloggingconfiguration"></a>

Configuration settings for delivering logs to Amazon CloudWatch log groups.

## Syntax
<a name="aws-properties-athena-workgroup-cloudwatchloggingconfiguration-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-athena-workgroup-cloudwatchloggingconfiguration-syntax.json"></a>

```
{
  "[Enabled](#cfn-athena-workgroup-cloudwatchloggingconfiguration-enabled)" : Boolean,
  "[LogGroup](#cfn-athena-workgroup-cloudwatchloggingconfiguration-loggroup)" : String,
  "[LogStreamNamePrefix](#cfn-athena-workgroup-cloudwatchloggingconfiguration-logstreamnameprefix)" : String,
  "[LogTypes](#cfn-athena-workgroup-cloudwatchloggingconfiguration-logtypes)" : {Key: Value, ...}
}
```

### YAML
<a name="aws-properties-athena-workgroup-cloudwatchloggingconfiguration-syntax.yaml"></a>

```
  [Enabled](#cfn-athena-workgroup-cloudwatchloggingconfiguration-enabled): Boolean
  [LogGroup](#cfn-athena-workgroup-cloudwatchloggingconfiguration-loggroup): String
  [LogStreamNamePrefix](#cfn-athena-workgroup-cloudwatchloggingconfiguration-logstreamnameprefix): String
  [LogTypes](#cfn-athena-workgroup-cloudwatchloggingconfiguration-logtypes): 
    Key: Value
```

## Properties
<a name="aws-properties-athena-workgroup-cloudwatchloggingconfiguration-properties"></a>

`Enabled`  <a name="cfn-athena-workgroup-cloudwatchloggingconfiguration-enabled"></a>
Enables CloudWatch logging.  
*Required*: No  
*Type*: Boolean  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`LogGroup`  <a name="cfn-athena-workgroup-cloudwatchloggingconfiguration-loggroup"></a>
The name of the log group in Amazon CloudWatch Logs where you want to publish your logs.  
*Required*: No  
*Type*: String  
*Pattern*: `^[a-zA-Z0-9._/-]+$`  
*Minimum*: `1`  
*Maximum*: `512`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`LogStreamNamePrefix`  <a name="cfn-athena-workgroup-cloudwatchloggingconfiguration-logstreamnameprefix"></a>
Prefix for the CloudWatch log stream name.  
*Required*: No  
*Type*: String  
*Pattern*: `^[^:*]*$`  
*Minimum*: `1`  
*Maximum*: `512`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`LogTypes`  <a name="cfn-athena-workgroup-cloudwatchloggingconfiguration-logtypes"></a>
The types of logs that you want to publish to CloudWatch.  
*Required*: No  
*Type*: Object of Array  
*Pattern*: `^.+$`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

# AWS::Athena::WorkGroup CustomerContentEncryptionConfiguration
<a name="aws-properties-athena-workgroup-customercontentencryptionconfiguration"></a>

Specifies the customer managed KMS key that is used to encrypt the user's data stores in Athena. When an AWS managed key is used, this value is null. This setting does not apply to Athena SQL workgroups.

## Syntax
<a name="aws-properties-athena-workgroup-customercontentencryptionconfiguration-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-athena-workgroup-customercontentencryptionconfiguration-syntax.json"></a>

```
{
  "[KmsKey](#cfn-athena-workgroup-customercontentencryptionconfiguration-kmskey)" : String
}
```

### YAML
<a name="aws-properties-athena-workgroup-customercontentencryptionconfiguration-syntax.yaml"></a>

```
  [KmsKey](#cfn-athena-workgroup-customercontentencryptionconfiguration-kmskey): String
```

## Properties
<a name="aws-properties-athena-workgroup-customercontentencryptionconfiguration-properties"></a>

`KmsKey`  <a name="cfn-athena-workgroup-customercontentencryptionconfiguration-kmskey"></a>
The customer managed KMS key that is used to encrypt the user's data stores in Athena.  
*Required*: Yes  
*Type*: String  
*Pattern*: `^arn:aws[a-z\-]*:kms:([a-z0-9\-]+):\d{12}:key/?[a-zA-Z_0-9+=,.@\-_/]+$|^arn:aws[a-z\-]*:kms:([a-z0-9\-]+):\d{12}:alias/?[a-zA-Z_0-9+=,.@\-_/]+$|^alias/[a-zA-Z0-9/_-]+$|[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}`  
*Minimum*: `1`  
*Maximum*: `2048`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

# AWS::Athena::WorkGroup EncryptionConfiguration
<a name="aws-properties-athena-workgroup-encryptionconfiguration"></a>

If query results are encrypted in Amazon S3, indicates the encryption option used (for example, `SSE_KMS` or `CSE_KMS`) and key information.

## Syntax
<a name="aws-properties-athena-workgroup-encryptionconfiguration-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-athena-workgroup-encryptionconfiguration-syntax.json"></a>

```
{
  "[EncryptionOption](#cfn-athena-workgroup-encryptionconfiguration-encryptionoption)" : String,
  "[KmsKey](#cfn-athena-workgroup-encryptionconfiguration-kmskey)" : String
}
```

### YAML
<a name="aws-properties-athena-workgroup-encryptionconfiguration-syntax.yaml"></a>

```
  [EncryptionOption](#cfn-athena-workgroup-encryptionconfiguration-encryptionoption): String
  [KmsKey](#cfn-athena-workgroup-encryptionconfiguration-kmskey): String
```

## Properties
<a name="aws-properties-athena-workgroup-encryptionconfiguration-properties"></a>

`EncryptionOption`  <a name="cfn-athena-workgroup-encryptionconfiguration-encryptionoption"></a>
Indicates whether Amazon S3 server-side encryption with Amazon S3-managed keys (`SSE_S3`), server-side encryption with KMS-managed keys (`SSE_KMS`), or client-side encryption with KMS-managed keys (`CSE_KMS`) is used.  
If a query runs in a workgroup and the workgroup overrides client-side settings, then the workgroup's setting for encryption is used. It specifies whether query results must be encrypted, for all queries that run in this workgroup.   
*Required*: Yes  
*Type*: String  
*Allowed values*: `SSE_S3 | SSE_KMS | CSE_KMS`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`KmsKey`  <a name="cfn-athena-workgroup-encryptionconfiguration-kmskey"></a>
For `SSE_KMS` and `CSE_KMS`, this is the KMS key ARN or ID.  
*Required*: No  
*Type*: String  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

# AWS::Athena::WorkGroup EngineConfiguration
<a name="aws-properties-athena-workgroup-engineconfiguration"></a>

The engine configuration for the workgroup, which includes the minimum/maximum number of Data Processing Units (DPU) that queries should use when running in provisioned capacity. If not specified, Athena uses default values (Default value for min is 4 and for max is Minimum of 124 and allocated DPUs).

To specify DPU values for PC queries the WG containing EngineConfiguration should have the following values: The name of the Classifications should be `athena-query-engine-properties`, with the only allowed properties as `max-dpu-count` and `min-dpu-count`.

## Syntax
<a name="aws-properties-athena-workgroup-engineconfiguration-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-athena-workgroup-engineconfiguration-syntax.json"></a>

```
{
  "[AdditionalConfigs](#cfn-athena-workgroup-engineconfiguration-additionalconfigs)" : {Key: Value, ...},
  "[Classifications](#cfn-athena-workgroup-engineconfiguration-classifications)" : [ Classification, ... ],
  "[CoordinatorDpuSize](#cfn-athena-workgroup-engineconfiguration-coordinatordpusize)" : Integer,
  "[DefaultExecutorDpuSize](#cfn-athena-workgroup-engineconfiguration-defaultexecutordpusize)" : Integer,
  "[MaxConcurrentDpus](#cfn-athena-workgroup-engineconfiguration-maxconcurrentdpus)" : Integer,
  "[SparkProperties](#cfn-athena-workgroup-engineconfiguration-sparkproperties)" : {Key: Value, ...}
}
```

### YAML
<a name="aws-properties-athena-workgroup-engineconfiguration-syntax.yaml"></a>

```
  [AdditionalConfigs](#cfn-athena-workgroup-engineconfiguration-additionalconfigs): 
    Key: Value
  [Classifications](#cfn-athena-workgroup-engineconfiguration-classifications): 
    - Classification
  [CoordinatorDpuSize](#cfn-athena-workgroup-engineconfiguration-coordinatordpusize): Integer
  [DefaultExecutorDpuSize](#cfn-athena-workgroup-engineconfiguration-defaultexecutordpusize): Integer
  [MaxConcurrentDpus](#cfn-athena-workgroup-engineconfiguration-maxconcurrentdpus): Integer
  [SparkProperties](#cfn-athena-workgroup-engineconfiguration-sparkproperties): 
    Key: Value
```

## Properties
<a name="aws-properties-athena-workgroup-engineconfiguration-properties"></a>

`AdditionalConfigs`  <a name="cfn-athena-workgroup-engineconfiguration-additionalconfigs"></a>
Contains additional notebook engine `MAP<string, string>` parameter mappings in the form of key-value pairs. To specify an Athena notebook that the Jupyter server will download and serve, specify a value for the StartSessionRequest\$1NotebookVersion field, and then add a key named `NotebookId` to `AdditionalConfigs` that has the value of the Athena notebook ID.  
*Required*: No  
*Type*: Object of String  
*Pattern*: `^.+$`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`Classifications`  <a name="cfn-athena-workgroup-engineconfiguration-classifications"></a>
The configuration classifications that can be specified for the engine.  
*Required*: No  
*Type*: Array of [Classification](aws-properties-athena-workgroup-classification.md)  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`CoordinatorDpuSize`  <a name="cfn-athena-workgroup-engineconfiguration-coordinatordpusize"></a>
The number of DPUs to use for the coordinator. A coordinator is a special executor that orchestrates processing work and manages other executors in a notebook session. The default is 1.  
*Required*: No  
*Type*: Integer  
*Minimum*: `1`  
*Maximum*: `1`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`DefaultExecutorDpuSize`  <a name="cfn-athena-workgroup-engineconfiguration-defaultexecutordpusize"></a>
The default number of DPUs to use for executors. An executor is the smallest unit of compute that a notebook session can request from Athena. The default is 1.  
*Required*: No  
*Type*: Integer  
*Minimum*: `1`  
*Maximum*: `1`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`MaxConcurrentDpus`  <a name="cfn-athena-workgroup-engineconfiguration-maxconcurrentdpus"></a>
The maximum number of DPUs that can run concurrently.  
*Required*: No  
*Type*: Integer  
*Minimum*: `2`  
*Maximum*: `5000`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`SparkProperties`  <a name="cfn-athena-workgroup-engineconfiguration-sparkproperties"></a>
Specifies custom jar files and Spark properties for use cases like cluster encryption, table formats, and general Spark tuning.  
*Required*: No  
*Type*: Object of String  
*Pattern*: `^.+$`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

# AWS::Athena::WorkGroup EngineVersion
<a name="aws-properties-athena-workgroup-engineversion"></a>

The Athena engine version for running queries, or the PySpark engine version for running sessions.

## Syntax
<a name="aws-properties-athena-workgroup-engineversion-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-athena-workgroup-engineversion-syntax.json"></a>

```
{
  "[EffectiveEngineVersion](#cfn-athena-workgroup-engineversion-effectiveengineversion)" : String,
  "[SelectedEngineVersion](#cfn-athena-workgroup-engineversion-selectedengineversion)" : String
}
```

### YAML
<a name="aws-properties-athena-workgroup-engineversion-syntax.yaml"></a>

```
  [EffectiveEngineVersion](#cfn-athena-workgroup-engineversion-effectiveengineversion): String
  [SelectedEngineVersion](#cfn-athena-workgroup-engineversion-selectedengineversion): String
```

## Properties
<a name="aws-properties-athena-workgroup-engineversion-properties"></a>

`EffectiveEngineVersion`  <a name="cfn-athena-workgroup-engineversion-effectiveengineversion"></a>
Read only. The engine version on which the query runs. If the user requests a valid engine version other than Auto, the effective engine version is the same as the engine version that the user requested. If the user requests Auto, the effective engine version is chosen by Athena. When a request to update the engine version is made by a `CreateWorkGroup` or `UpdateWorkGroup` operation, the `EffectiveEngineVersion` field is ignored.  
*Required*: No  
*Type*: String  
*Minimum*: `1`  
*Maximum*: `128`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`SelectedEngineVersion`  <a name="cfn-athena-workgroup-engineversion-selectedengineversion"></a>
The engine version requested by the user. Possible values are determined by the output of `ListEngineVersions`, including AUTO. The default is AUTO.  
*Required*: No  
*Type*: String  
*Minimum*: `1`  
*Maximum*: `128`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

# AWS::Athena::WorkGroup ManagedLoggingConfiguration
<a name="aws-properties-athena-workgroup-managedloggingconfiguration"></a>

Configuration settings for delivering logs to Amazon S3 buckets.

## Syntax
<a name="aws-properties-athena-workgroup-managedloggingconfiguration-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-athena-workgroup-managedloggingconfiguration-syntax.json"></a>

```
{
  "[Enabled](#cfn-athena-workgroup-managedloggingconfiguration-enabled)" : Boolean,
  "[KmsKey](#cfn-athena-workgroup-managedloggingconfiguration-kmskey)" : String
}
```

### YAML
<a name="aws-properties-athena-workgroup-managedloggingconfiguration-syntax.yaml"></a>

```
  [Enabled](#cfn-athena-workgroup-managedloggingconfiguration-enabled): Boolean
  [KmsKey](#cfn-athena-workgroup-managedloggingconfiguration-kmskey): String
```

## Properties
<a name="aws-properties-athena-workgroup-managedloggingconfiguration-properties"></a>

`Enabled`  <a name="cfn-athena-workgroup-managedloggingconfiguration-enabled"></a>
Enables mamanged log persistence.  
*Required*: No  
*Type*: Boolean  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`KmsKey`  <a name="cfn-athena-workgroup-managedloggingconfiguration-kmskey"></a>
The KMS key ARN to encrypt the logs stored in managed log persistence.  
*Required*: No  
*Type*: String  
*Pattern*: `^arn:aws[a-z\-]*:kms:([a-z0-9\-]+):\d{12}:key/?[a-zA-Z_0-9+=,.@\-_/]+$|^arn:aws[a-z\-]*:kms:([a-z0-9\-]+):\d{12}:alias/?[a-zA-Z_0-9+=,.@\-_/]+$|^alias/[a-zA-Z0-9/_-]+$|[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}`  
*Minimum*: `1`  
*Maximum*: `2048`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

# AWS::Athena::WorkGroup ManagedQueryResultsConfiguration
<a name="aws-properties-athena-workgroup-managedqueryresultsconfiguration"></a>

 The configuration for storing results in Athena owned storage, which includes whether this feature is enabled; whether encryption configuration, if any, is used for encrypting query results. 

## Syntax
<a name="aws-properties-athena-workgroup-managedqueryresultsconfiguration-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-athena-workgroup-managedqueryresultsconfiguration-syntax.json"></a>

```
{
  "[Enabled](#cfn-athena-workgroup-managedqueryresultsconfiguration-enabled)" : Boolean,
  "[EncryptionConfiguration](#cfn-athena-workgroup-managedqueryresultsconfiguration-encryptionconfiguration)" : ManagedStorageEncryptionConfiguration
}
```

### YAML
<a name="aws-properties-athena-workgroup-managedqueryresultsconfiguration-syntax.yaml"></a>

```
  [Enabled](#cfn-athena-workgroup-managedqueryresultsconfiguration-enabled): Boolean
  [EncryptionConfiguration](#cfn-athena-workgroup-managedqueryresultsconfiguration-encryptionconfiguration): 
    ManagedStorageEncryptionConfiguration
```

## Properties
<a name="aws-properties-athena-workgroup-managedqueryresultsconfiguration-properties"></a>

`Enabled`  <a name="cfn-athena-workgroup-managedqueryresultsconfiguration-enabled"></a>
If set to true, allows you to store query results in Athena owned storage. If set to false, workgroup member stores query results in location specified under `ResultConfiguration$OutputLocation`. The default is false. A workgroup cannot have the `ResultConfiguration$OutputLocation` parameter when you set this field to true.   
*Required*: No  
*Type*: Boolean  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`EncryptionConfiguration`  <a name="cfn-athena-workgroup-managedqueryresultsconfiguration-encryptionconfiguration"></a>
If you encrypt query and calculation results in Athena owned storage, this field indicates the encryption option (for example, SSE\$1KMS or CSE\$1KMS) and key information.  
*Required*: No  
*Type*: [ManagedStorageEncryptionConfiguration](aws-properties-athena-workgroup-managedstorageencryptionconfiguration.md)  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

# AWS::Athena::WorkGroup ManagedStorageEncryptionConfiguration
<a name="aws-properties-athena-workgroup-managedstorageencryptionconfiguration"></a>

<a name="aws-properties-athena-workgroup-managedstorageencryptionconfiguration-description"></a>The `ManagedStorageEncryptionConfiguration` property type specifies Property description not available. for an [AWS::Athena::WorkGroup](aws-resource-athena-workgroup.md).

## Syntax
<a name="aws-properties-athena-workgroup-managedstorageencryptionconfiguration-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-athena-workgroup-managedstorageencryptionconfiguration-syntax.json"></a>

```
{
  "[KmsKey](#cfn-athena-workgroup-managedstorageencryptionconfiguration-kmskey)" : String
}
```

### YAML
<a name="aws-properties-athena-workgroup-managedstorageencryptionconfiguration-syntax.yaml"></a>

```
  [KmsKey](#cfn-athena-workgroup-managedstorageencryptionconfiguration-kmskey): String
```

## Properties
<a name="aws-properties-athena-workgroup-managedstorageencryptionconfiguration-properties"></a>

`KmsKey`  <a name="cfn-athena-workgroup-managedstorageencryptionconfiguration-kmskey"></a>
Property description not available.  
*Required*: No  
*Type*: String  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

# AWS::Athena::WorkGroup MonitoringConfiguration
<a name="aws-properties-athena-workgroup-monitoringconfiguration"></a>

Contains the configuration settings for managed log persistence, delivering logs to Amazon S3 buckets, Amazon CloudWatch log groups etc.

## Syntax
<a name="aws-properties-athena-workgroup-monitoringconfiguration-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-athena-workgroup-monitoringconfiguration-syntax.json"></a>

```
{
  "[CloudWatchLoggingConfiguration](#cfn-athena-workgroup-monitoringconfiguration-cloudwatchloggingconfiguration)" : CloudWatchLoggingConfiguration,
  "[ManagedLoggingConfiguration](#cfn-athena-workgroup-monitoringconfiguration-managedloggingconfiguration)" : ManagedLoggingConfiguration,
  "[S3LoggingConfiguration](#cfn-athena-workgroup-monitoringconfiguration-s3loggingconfiguration)" : S3LoggingConfiguration
}
```

### YAML
<a name="aws-properties-athena-workgroup-monitoringconfiguration-syntax.yaml"></a>

```
  [CloudWatchLoggingConfiguration](#cfn-athena-workgroup-monitoringconfiguration-cloudwatchloggingconfiguration): 
    CloudWatchLoggingConfiguration
  [ManagedLoggingConfiguration](#cfn-athena-workgroup-monitoringconfiguration-managedloggingconfiguration): 
    ManagedLoggingConfiguration
  [S3LoggingConfiguration](#cfn-athena-workgroup-monitoringconfiguration-s3loggingconfiguration): 
    S3LoggingConfiguration
```

## Properties
<a name="aws-properties-athena-workgroup-monitoringconfiguration-properties"></a>

`CloudWatchLoggingConfiguration`  <a name="cfn-athena-workgroup-monitoringconfiguration-cloudwatchloggingconfiguration"></a>
Configuration settings for delivering logs to Amazon CloudWatch log groups.   
*Required*: No  
*Type*: [CloudWatchLoggingConfiguration](aws-properties-athena-workgroup-cloudwatchloggingconfiguration.md)  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`ManagedLoggingConfiguration`  <a name="cfn-athena-workgroup-monitoringconfiguration-managedloggingconfiguration"></a>
Configuration settings for managed log persistence.   
*Required*: No  
*Type*: [ManagedLoggingConfiguration](aws-properties-athena-workgroup-managedloggingconfiguration.md)  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`S3LoggingConfiguration`  <a name="cfn-athena-workgroup-monitoringconfiguration-s3loggingconfiguration"></a>
Configuration settings for delivering logs to Amazon S3 buckets.   
*Required*: No  
*Type*: [S3LoggingConfiguration](aws-properties-athena-workgroup-s3loggingconfiguration.md)  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

# AWS::Athena::WorkGroup ResultConfiguration
<a name="aws-properties-athena-workgroup-resultconfiguration"></a>

The location in Amazon S3 where query and calculation results are stored and the encryption option, if any, used for query and calculation results. These are known as "client-side settings". If workgroup settings override client-side settings, then the query uses the workgroup settings.

## Syntax
<a name="aws-properties-athena-workgroup-resultconfiguration-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-athena-workgroup-resultconfiguration-syntax.json"></a>

```
{
  "[AclConfiguration](#cfn-athena-workgroup-resultconfiguration-aclconfiguration)" : AclConfiguration,
  "[EncryptionConfiguration](#cfn-athena-workgroup-resultconfiguration-encryptionconfiguration)" : EncryptionConfiguration,
  "[ExpectedBucketOwner](#cfn-athena-workgroup-resultconfiguration-expectedbucketowner)" : String,
  "[OutputLocation](#cfn-athena-workgroup-resultconfiguration-outputlocation)" : String
}
```

### YAML
<a name="aws-properties-athena-workgroup-resultconfiguration-syntax.yaml"></a>

```
  [AclConfiguration](#cfn-athena-workgroup-resultconfiguration-aclconfiguration): 
    AclConfiguration
  [EncryptionConfiguration](#cfn-athena-workgroup-resultconfiguration-encryptionconfiguration): 
    EncryptionConfiguration
  [ExpectedBucketOwner](#cfn-athena-workgroup-resultconfiguration-expectedbucketowner): String
  [OutputLocation](#cfn-athena-workgroup-resultconfiguration-outputlocation): String
```

## Properties
<a name="aws-properties-athena-workgroup-resultconfiguration-properties"></a>

`AclConfiguration`  <a name="cfn-athena-workgroup-resultconfiguration-aclconfiguration"></a>
Indicates that an Amazon S3 canned ACL should be set to control ownership of stored query results. Currently the only supported canned ACL is `BUCKET_OWNER_FULL_CONTROL`. This is a client-side setting. If workgroup settings override client-side settings, then the query uses the ACL configuration that is specified for the workgroup, and also uses the location for storing query results specified in the workgroup. See [EnforceWorkGroupConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfiguration.html#cfn-athena-workgroup-workgroupconfiguration-enforceworkgroupconfiguration).  
*Required*: No  
*Type*: [AclConfiguration](aws-properties-athena-workgroup-aclconfiguration.md)  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`EncryptionConfiguration`  <a name="cfn-athena-workgroup-resultconfiguration-encryptionconfiguration"></a>
If query results are encrypted in Amazon S3, indicates the encryption option used (for example, `SSE_KMS` or `CSE_KMS`) and key information. This is a client-side setting. If workgroup settings override client-side settings, then the query uses the encryption configuration that is specified for the workgroup, and also uses the location for storing query results specified in the workgroup. See [EnforceWorkGroupConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfiguration.html#cfn-athena-workgroup-workgroupconfiguration-enforceworkgroupconfiguration) and [Override client-side settings](https://docs.aws.amazon.com/athena/latest/ug/workgroups-settings-override.html).  
*Required*: No  
*Type*: [EncryptionConfiguration](aws-properties-athena-workgroup-encryptionconfiguration.md)  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`ExpectedBucketOwner`  <a name="cfn-athena-workgroup-resultconfiguration-expectedbucketowner"></a>
The account ID that you expect to be the owner of the Amazon S3 bucket specified by `ResultConfiguration:OutputLocation`. If set, Athena uses the value for `ExpectedBucketOwner` when it makes Amazon S3 calls to your specified output location. If the `ExpectedBucketOwner` account ID does not match the actual owner of the Amazon S3 bucket, the call fails with a permissions error.  
This is a client-side setting. If workgroup settings override client-side settings, then the query uses the `ExpectedBucketOwner` setting that is specified for the workgroup, and also uses the location for storing query results specified in the workgroup. See [EnforceWorkGroupConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfiguration.html#cfn-athena-workgroup-workgroupconfiguration-enforceworkgroupconfiguration).  
*Required*: No  
*Type*: String  
*Pattern*: `^[0-9]+$`  
*Minimum*: `12`  
*Maximum*: `12`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`OutputLocation`  <a name="cfn-athena-workgroup-resultconfiguration-outputlocation"></a>
The location in Amazon S3 where your query results are stored, such as `s3://path/to/query/bucket/`. To run a query, you must specify the query results location using either a client-side setting for individual queries or a location specified by the workgroup. If workgroup settings override client-side settings, then the query uses the location specified for the workgroup. If no query location is set, Athena issues an error. For more information, see [Work with query results and recent queries](https://docs.aws.amazon.com/athena/latest/ug/querying.html) and [EnforceWorkGroupConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfiguration.html#cfn-athena-workgroup-workgroupconfiguration-enforceworkgroupconfiguration).  
*Required*: No  
*Type*: String  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

# AWS::Athena::WorkGroup ResultConfigurationUpdates
<a name="aws-properties-athena-workgroup-resultconfigurationupdates"></a>

The information about the updates in the query results, such as output location and encryption configuration for the query results.

## Syntax
<a name="aws-properties-athena-workgroup-resultconfigurationupdates-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-athena-workgroup-resultconfigurationupdates-syntax.json"></a>

```
{
  "[AclConfiguration](#cfn-athena-workgroup-resultconfigurationupdates-aclconfiguration)" : AclConfiguration,
  "[EncryptionConfiguration](#cfn-athena-workgroup-resultconfigurationupdates-encryptionconfiguration)" : EncryptionConfiguration,
  "[ExpectedBucketOwner](#cfn-athena-workgroup-resultconfigurationupdates-expectedbucketowner)" : String,
  "[OutputLocation](#cfn-athena-workgroup-resultconfigurationupdates-outputlocation)" : String,
  "[RemoveAclConfiguration](#cfn-athena-workgroup-resultconfigurationupdates-removeaclconfiguration)" : Boolean,
  "[RemoveEncryptionConfiguration](#cfn-athena-workgroup-resultconfigurationupdates-removeencryptionconfiguration)" : Boolean,
  "[RemoveExpectedBucketOwner](#cfn-athena-workgroup-resultconfigurationupdates-removeexpectedbucketowner)" : Boolean,
  "[RemoveOutputLocation](#cfn-athena-workgroup-resultconfigurationupdates-removeoutputlocation)" : Boolean
}
```

### YAML
<a name="aws-properties-athena-workgroup-resultconfigurationupdates-syntax.yaml"></a>

```
  [AclConfiguration](#cfn-athena-workgroup-resultconfigurationupdates-aclconfiguration): 
    AclConfiguration
  [EncryptionConfiguration](#cfn-athena-workgroup-resultconfigurationupdates-encryptionconfiguration): 
    EncryptionConfiguration
  [ExpectedBucketOwner](#cfn-athena-workgroup-resultconfigurationupdates-expectedbucketowner): String
  [OutputLocation](#cfn-athena-workgroup-resultconfigurationupdates-outputlocation): String
  [RemoveAclConfiguration](#cfn-athena-workgroup-resultconfigurationupdates-removeaclconfiguration): Boolean
  [RemoveEncryptionConfiguration](#cfn-athena-workgroup-resultconfigurationupdates-removeencryptionconfiguration): Boolean
  [RemoveExpectedBucketOwner](#cfn-athena-workgroup-resultconfigurationupdates-removeexpectedbucketowner): Boolean
  [RemoveOutputLocation](#cfn-athena-workgroup-resultconfigurationupdates-removeoutputlocation): Boolean
```

## Properties
<a name="aws-properties-athena-workgroup-resultconfigurationupdates-properties"></a>

`AclConfiguration`  <a name="cfn-athena-workgroup-resultconfigurationupdates-aclconfiguration"></a>
The ACL configuration for the query results.  
*Required*: No  
*Type*: [AclConfiguration](aws-properties-athena-workgroup-aclconfiguration.md)  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`EncryptionConfiguration`  <a name="cfn-athena-workgroup-resultconfigurationupdates-encryptionconfiguration"></a>
The encryption configuration for the query results.  
*Required*: No  
*Type*: [EncryptionConfiguration](aws-properties-athena-workgroup-encryptionconfiguration.md)  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`ExpectedBucketOwner`  <a name="cfn-athena-workgroup-resultconfigurationupdates-expectedbucketowner"></a>
The AWS account ID that you expect to be the owner of the Amazon S3 bucket specified by [https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-athena-workgroup-resultconfiguration.html#cfn-athena-workgroup-resultconfiguration-outputlocation](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-athena-workgroup-resultconfiguration.html#cfn-athena-workgroup-resultconfiguration-outputlocation). If set, Athena uses the value for `ExpectedBucketOwner` when it makes Amazon S3 calls to your specified output location. If the `ExpectedBucketOwner`AWS account ID does not match the actual owner of the Amazon S3 bucket, the call fails with a permissions error.  
If workgroup settings override client-side settings, then the query uses the `ExpectedBucketOwner` setting that is specified for the workgroup, and also uses the location for storing query results specified in the workgroup. See [https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-athena-workgroup-workgroupconfiguration.html#cfn-athena-workgroup-workgroupconfiguration-enforceworkgroupconfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-athena-workgroup-workgroupconfiguration.html#cfn-athena-workgroup-workgroupconfiguration-enforceworkgroupconfiguration) and [Workgroup Settings Override Client-Side Settings](https://docs.aws.amazon.com/athena/latest/ug/workgroups-settings-override.html).  
*Required*: No  
*Type*: String  
*Pattern*: `^[0-9]+$`  
*Minimum*: `12`  
*Maximum*: `12`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`OutputLocation`  <a name="cfn-athena-workgroup-resultconfigurationupdates-outputlocation"></a>
The location in Amazon S3 where your query results are stored, such as `s3://path/to/query/bucket/`. For more information, see [Query Results](https://docs.aws.amazon.com/athena/latest/ug/querying.html) If workgroup settings override client-side settings, then the query uses the location for the query results and the encryption configuration that are specified for the workgroup. The "workgroup settings override" is specified in EnforceWorkGroupConfiguration (true/false) in the WorkGroupConfiguration. See [EnforceWorkGroupConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfiguration.html#cfn-athena-workgroup-workgroupconfiguration-enforceworkgroupconfiguration).  
*Required*: No  
*Type*: String  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`RemoveAclConfiguration`  <a name="cfn-athena-workgroup-resultconfigurationupdates-removeaclconfiguration"></a>
If set to `true`, indicates that the previously-specified ACL configuration for queries in this workgroup should be ignored and set to null. If set to `false` or not set, and a value is present in the `AclConfiguration` of `ResultConfigurationUpdates`, the `AclConfiguration` in the workgroup's `ResultConfiguration` is updated with the new value. For more information, see [Workgroup Settings Override Client-Side Settings](https://docs.aws.amazon.com/athena/latest/ug/workgroups-settings-override.html).  
*Required*: No  
*Type*: Boolean  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`RemoveEncryptionConfiguration`  <a name="cfn-athena-workgroup-resultconfigurationupdates-removeencryptionconfiguration"></a>
If set to "true", indicates that the previously-specified encryption configuration (also known as the client-side setting) for queries in this workgroup should be ignored and set to null. If set to "false" or not set, and a value is present in the EncryptionConfiguration in ResultConfigurationUpdates (the client-side setting), the EncryptionConfiguration in the workgroup's ResultConfiguration will be updated with the new value. For more information, see [Override Client-Side Settings](https://docs.aws.amazon.com/athena/latest/ug/workgroups-settings-override.html).  
*Required*: No  
*Type*: Boolean  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`RemoveExpectedBucketOwner`  <a name="cfn-athena-workgroup-resultconfigurationupdates-removeexpectedbucketowner"></a>
If set to "true", removes the AWS account ID previously specified for [https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-athena-workgroup-resultconfiguration.html#cfn-athena-workgroup-resultconfiguration-expectedbucketowner](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-athena-workgroup-resultconfiguration.html#cfn-athena-workgroup-resultconfiguration-expectedbucketowner). If set to "false" or not set, and a value is present in the `ExpectedBucketOwner` in `ResultConfigurationUpdates` (the client-side setting), the `ExpectedBucketOwner` in the workgroup's `ResultConfiguration` is updated with the new value. For more information, see [Workgroup Settings Override Client-Side Settings](https://docs.aws.amazon.com/athena/latest/ug/workgroups-settings-override.html).  
*Required*: No  
*Type*: Boolean  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`RemoveOutputLocation`  <a name="cfn-athena-workgroup-resultconfigurationupdates-removeoutputlocation"></a>
If set to "true", indicates that the previously-specified query results location (also known as a client-side setting) for queries in this workgroup should be ignored and set to null. If set to "false" or not set, and a value is present in the OutputLocation in ResultConfigurationUpdates (the client-side setting), the OutputLocation in the workgroup's ResultConfiguration will be updated with the new value. For more information, see [Override Client-Side Settings](https://docs.aws.amazon.com/athena/latest/ug/workgroups-settings-override.html).  
*Required*: No  
*Type*: Boolean  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

# AWS::Athena::WorkGroup S3LoggingConfiguration
<a name="aws-properties-athena-workgroup-s3loggingconfiguration"></a>

Configuration settings for delivering logs to Amazon S3 buckets.

## Syntax
<a name="aws-properties-athena-workgroup-s3loggingconfiguration-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-athena-workgroup-s3loggingconfiguration-syntax.json"></a>

```
{
  "[Enabled](#cfn-athena-workgroup-s3loggingconfiguration-enabled)" : Boolean,
  "[KmsKey](#cfn-athena-workgroup-s3loggingconfiguration-kmskey)" : String,
  "[LogLocation](#cfn-athena-workgroup-s3loggingconfiguration-loglocation)" : String
}
```

### YAML
<a name="aws-properties-athena-workgroup-s3loggingconfiguration-syntax.yaml"></a>

```
  [Enabled](#cfn-athena-workgroup-s3loggingconfiguration-enabled): Boolean
  [KmsKey](#cfn-athena-workgroup-s3loggingconfiguration-kmskey): String
  [LogLocation](#cfn-athena-workgroup-s3loggingconfiguration-loglocation): String
```

## Properties
<a name="aws-properties-athena-workgroup-s3loggingconfiguration-properties"></a>

`Enabled`  <a name="cfn-athena-workgroup-s3loggingconfiguration-enabled"></a>
Enables S3 log delivery.  
*Required*: No  
*Type*: Boolean  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`KmsKey`  <a name="cfn-athena-workgroup-s3loggingconfiguration-kmskey"></a>
The KMS key ARN to encrypt the logs published to the given Amazon S3 destination.  
*Required*: No  
*Type*: String  
*Pattern*: `^arn:aws[a-z\-]*:kms:([a-z0-9\-]+):\d{12}:key/?[a-zA-Z_0-9+=,.@\-_/]+$|^arn:aws[a-z\-]*:kms:([a-z0-9\-]+):\d{12}:alias/?[a-zA-Z_0-9+=,.@\-_/]+$|^alias/[a-zA-Z0-9/_-]+$|[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}`  
*Minimum*: `1`  
*Maximum*: `2048`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`LogLocation`  <a name="cfn-athena-workgroup-s3loggingconfiguration-loglocation"></a>
The Amazon S3 destination URI for log publishing.  
*Required*: No  
*Type*: String  
*Pattern*: `^s3://[a-z0-9][a-z0-9\-]*[a-z0-9](/.*)?$`  
*Maximum*: `1024`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

# AWS::Athena::WorkGroup Tag
<a name="aws-properties-athena-workgroup-tag"></a>

A label that you assign to a resource. Athena resources include workgroups, data catalogs, and capacity reservations. Each tag consists of a key and an optional value, both of which you define. For example, you can use tags to categorize Athena resources by purpose, owner, or environment. Use a consistent set of tag keys to make it easier to search and filter the resources in your account. For best practices, see [Tagging Best Practices](https://docs.aws.amazon.com/whitepapers/latest/tagging-best-practices/tagging-best-practices.html). Tag keys can be from 1 to 128 UTF-8 Unicode characters, and tag values can be from 0 to 256 UTF-8 Unicode characters. Tags can use letters and numbers representable in UTF-8, and the following characters: \$1 - = . \$1 : / @. Tag keys and values are case-sensitive. Tag keys must be unique per resource. If you specify more than one tag, separate them by commas. 

## Syntax
<a name="aws-properties-athena-workgroup-tag-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-athena-workgroup-tag-syntax.json"></a>

```
{
  "[Key](#cfn-athena-workgroup-tag-key)" : String,
  "[Value](#cfn-athena-workgroup-tag-value)" : String
}
```

### YAML
<a name="aws-properties-athena-workgroup-tag-syntax.yaml"></a>

```
  [Key](#cfn-athena-workgroup-tag-key): String
  [Value](#cfn-athena-workgroup-tag-value): String
```

## Properties
<a name="aws-properties-athena-workgroup-tag-properties"></a>

`Key`  <a name="cfn-athena-workgroup-tag-key"></a>
A tag key. The tag key length is from 1 to 128 Unicode characters in UTF-8. You can use letters and numbers representable in UTF-8, and the following characters: \$1 - = . \$1 : / @. Tag keys are case-sensitive and must be unique per resource.   
*Required*: Yes  
*Type*: String  
*Minimum*: `1`  
*Maximum*: `128`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`Value`  <a name="cfn-athena-workgroup-tag-value"></a>
A tag value. The tag value length is from 0 to 256 Unicode characters in UTF-8. You can use letters and numbers representable in UTF-8, and the following characters: \$1 - = . \$1 : / @. Tag values are case-sensitive.   
*Required*: Yes  
*Type*: String  
*Minimum*: `0`  
*Maximum*: `256`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

# AWS::Athena::WorkGroup WorkGroupConfiguration
<a name="aws-properties-athena-workgroup-workgroupconfiguration"></a>

The configuration of the workgroup, which includes the location in Amazon S3 where query results are stored, the encryption option, if any, used for query results, whether Amazon CloudWatch Metrics are enabled for the workgroup, and the limit for the amount of bytes scanned (cutoff) per query, if it is specified. The [EnforceWorkGroupConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfiguration.html#cfn-athena-workgroup-workgroupconfiguration-enforceworkgroupconfiguration) option determines whether workgroup settings override client-side query settings.

## Syntax
<a name="aws-properties-athena-workgroup-workgroupconfiguration-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-athena-workgroup-workgroupconfiguration-syntax.json"></a>

```
{
  "[AdditionalConfiguration](#cfn-athena-workgroup-workgroupconfiguration-additionalconfiguration)" : String,
  "[BytesScannedCutoffPerQuery](#cfn-athena-workgroup-workgroupconfiguration-bytesscannedcutoffperquery)" : Integer,
  "[CustomerContentEncryptionConfiguration](#cfn-athena-workgroup-workgroupconfiguration-customercontentencryptionconfiguration)" : CustomerContentEncryptionConfiguration,
  "[EnforceWorkGroupConfiguration](#cfn-athena-workgroup-workgroupconfiguration-enforceworkgroupconfiguration)" : Boolean,
  "[EngineConfiguration](#cfn-athena-workgroup-workgroupconfiguration-engineconfiguration)" : EngineConfiguration,
  "[EngineVersion](#cfn-athena-workgroup-workgroupconfiguration-engineversion)" : EngineVersion,
  "[ExecutionRole](#cfn-athena-workgroup-workgroupconfiguration-executionrole)" : String,
  "[ManagedQueryResultsConfiguration](#cfn-athena-workgroup-workgroupconfiguration-managedqueryresultsconfiguration)" : ManagedQueryResultsConfiguration,
  "[MonitoringConfiguration](#cfn-athena-workgroup-workgroupconfiguration-monitoringconfiguration)" : MonitoringConfiguration,
  "[PublishCloudWatchMetricsEnabled](#cfn-athena-workgroup-workgroupconfiguration-publishcloudwatchmetricsenabled)" : Boolean,
  "[RequesterPaysEnabled](#cfn-athena-workgroup-workgroupconfiguration-requesterpaysenabled)" : Boolean,
  "[ResultConfiguration](#cfn-athena-workgroup-workgroupconfiguration-resultconfiguration)" : ResultConfiguration
}
```

### YAML
<a name="aws-properties-athena-workgroup-workgroupconfiguration-syntax.yaml"></a>

```
  [AdditionalConfiguration](#cfn-athena-workgroup-workgroupconfiguration-additionalconfiguration): String
  [BytesScannedCutoffPerQuery](#cfn-athena-workgroup-workgroupconfiguration-bytesscannedcutoffperquery): Integer
  [CustomerContentEncryptionConfiguration](#cfn-athena-workgroup-workgroupconfiguration-customercontentencryptionconfiguration): 
    CustomerContentEncryptionConfiguration
  [EnforceWorkGroupConfiguration](#cfn-athena-workgroup-workgroupconfiguration-enforceworkgroupconfiguration): Boolean
  [EngineConfiguration](#cfn-athena-workgroup-workgroupconfiguration-engineconfiguration): 
    EngineConfiguration
  [EngineVersion](#cfn-athena-workgroup-workgroupconfiguration-engineversion): 
    EngineVersion
  [ExecutionRole](#cfn-athena-workgroup-workgroupconfiguration-executionrole): String
  [ManagedQueryResultsConfiguration](#cfn-athena-workgroup-workgroupconfiguration-managedqueryresultsconfiguration): 
    ManagedQueryResultsConfiguration
  [MonitoringConfiguration](#cfn-athena-workgroup-workgroupconfiguration-monitoringconfiguration): 
    MonitoringConfiguration
  [PublishCloudWatchMetricsEnabled](#cfn-athena-workgroup-workgroupconfiguration-publishcloudwatchmetricsenabled): Boolean
  [RequesterPaysEnabled](#cfn-athena-workgroup-workgroupconfiguration-requesterpaysenabled): Boolean
  [ResultConfiguration](#cfn-athena-workgroup-workgroupconfiguration-resultconfiguration): 
    ResultConfiguration
```

## Properties
<a name="aws-properties-athena-workgroup-workgroupconfiguration-properties"></a>

`AdditionalConfiguration`  <a name="cfn-athena-workgroup-workgroupconfiguration-additionalconfiguration"></a>
Specifies a user defined JSON string that is passed to the session engine.  
*Required*: No  
*Type*: String  
*Minimum*: `1`  
*Maximum*: `128`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`BytesScannedCutoffPerQuery`  <a name="cfn-athena-workgroup-workgroupconfiguration-bytesscannedcutoffperquery"></a>
The upper limit (cutoff) for the amount of bytes a single query in a workgroup is allowed to scan. No default is defined.  
This property currently supports integer types. Support for long values is planned.
*Required*: No  
*Type*: Integer  
*Minimum*: `10000000`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`CustomerContentEncryptionConfiguration`  <a name="cfn-athena-workgroup-workgroupconfiguration-customercontentencryptionconfiguration"></a>
Specifies the KMS key that is used to encrypt the user's data stores in Athena. This setting does not apply to Athena SQL workgroups.  
*Required*: No  
*Type*: [CustomerContentEncryptionConfiguration](aws-properties-athena-workgroup-customercontentencryptionconfiguration.md)  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`EnforceWorkGroupConfiguration`  <a name="cfn-athena-workgroup-workgroupconfiguration-enforceworkgroupconfiguration"></a>
If set to "true", the settings for the workgroup override client-side settings. If set to "false", client-side settings are used. For more information, see [Override client-side settings](https://docs.aws.amazon.com/athena/latest/ug/workgroups-settings-override.html).  
*Required*: No  
*Type*: Boolean  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`EngineConfiguration`  <a name="cfn-athena-workgroup-workgroupconfiguration-engineconfiguration"></a>
Property description not available.  
*Required*: No  
*Type*: [EngineConfiguration](aws-properties-athena-workgroup-engineconfiguration.md)  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`EngineVersion`  <a name="cfn-athena-workgroup-workgroupconfiguration-engineversion"></a>
The engine version that all queries running on the workgroup use.  
*Required*: No  
*Type*: [EngineVersion](aws-properties-athena-workgroup-engineversion.md)  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`ExecutionRole`  <a name="cfn-athena-workgroup-workgroupconfiguration-executionrole"></a>
Role used to access user resources in an Athena for Apache Spark session. This property applies only to Spark-enabled workgroups in Athena.  
*Required*: No  
*Type*: String  
*Pattern*: `^arn:aws[a-z\-]*:iam::\d{12}:role/?[a-zA-Z_0-9+=,.@\-_/]+$`  
*Minimum*: `20`  
*Maximum*: `2048`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`ManagedQueryResultsConfiguration`  <a name="cfn-athena-workgroup-workgroupconfiguration-managedqueryresultsconfiguration"></a>
 The configuration for storing results in Athena owned storage, which includes whether this feature is enabled; whether encryption configuration, if any, is used for encrypting query results.   
*Required*: No  
*Type*: [ManagedQueryResultsConfiguration](aws-properties-athena-workgroup-managedqueryresultsconfiguration.md)  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`MonitoringConfiguration`  <a name="cfn-athena-workgroup-workgroupconfiguration-monitoringconfiguration"></a>
Contains the configuration settings for managed log persistence, delivering logs to Amazon S3 buckets, Amazon CloudWatch log groups etc.  
*Required*: No  
*Type*: [MonitoringConfiguration](aws-properties-athena-workgroup-monitoringconfiguration.md)  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`PublishCloudWatchMetricsEnabled`  <a name="cfn-athena-workgroup-workgroupconfiguration-publishcloudwatchmetricsenabled"></a>
Indicates that the Amazon CloudWatch metrics are enabled for the workgroup.  
*Required*: No  
*Type*: Boolean  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`RequesterPaysEnabled`  <a name="cfn-athena-workgroup-workgroupconfiguration-requesterpaysenabled"></a>
If set to `true`, allows members assigned to a workgroup to reference Amazon S3 Requester Pays buckets in queries. If set to `false`, workgroup members cannot query data from Requester Pays buckets, and queries that retrieve data from Requester Pays buckets cause an error. The default is `false`. For more information about Requester Pays buckets, see [Requester Pays Buckets](https://docs.aws.amazon.com/AmazonS3/latest/dev/RequesterPaysBuckets.html) in the *Amazon Simple Storage Service Developer Guide*.  
*Required*: No  
*Type*: Boolean  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`ResultConfiguration`  <a name="cfn-athena-workgroup-workgroupconfiguration-resultconfiguration"></a>
Specifies the location in Amazon S3 where query results are stored and the encryption option, if any, used for query results. For more information, see [Work with query results and recent queries](https://docs.aws.amazon.com/athena/latest/ug/querying.html).  
*Required*: No  
*Type*: [ResultConfiguration](aws-properties-athena-workgroup-resultconfiguration.md)  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)