Amazon Athena 접근

Teleport로 Amazon Athena에 접근하는 방법

Teleport의 AWS CLI 및 콘솔 지원을 사용하여 Amazon Athena에 대한 보안 접근을 설정할 수 있습니다. 이 가이드에서 다음을 수행하는 방법을 설명합니다: Teleport Application Service 설치. AWS CLI 및 콘솔 접근 설정. Athena 데이터베이스 연결. 사전 조건 # AWS account with Athena databases. IAM permissions to create IAM roles. aws Command Line Interface (CLI) tool installed in PATH. A host, e.g., an EC2 instance, where you will run the Teleport Application Service. (!docs/pages/includes/edition-prereqs-tabs.mdx!) (!docs/pages/includes/tctl.mdx!) Tip If you have not yet deployed the Auth Service and Proxy Service, you should follow one of our getting started guides or try our Teleport application access interactive learning track . We will assume your Teleport cluster is accessible at teleport.example.com and *.teleport.example.com . You can substitute the address of your Teleport Proxy Service. (For Teleport Cloud customers, this will be similar to mytenant.teleport.sh .) Note (!docs/pages/includes/dns-app-access.mdx!) 1/5단계. Athena 접근을 위한 IAM 역할 생성 # Create an IAM role that provides access to your Athena resources. Teleport Application Service will assume this IAM role on behalf of the Teleport user that accesses these Athena resources. There are several methods to create an IAM role: Using AWS Console Visit the Roles page of the AWS Console, then press "Create Role". Select the "AWS account" option, which creates a default trust policy to allow other entities in this account to assume this role: Press "Next". Find the AWS-managed policy {{ managed-polic