Questions tagged with Amazon Athena

Content language: English

Sort by most recent

Browse through the questions and answers listed below or filter and sort to narrow down your results.

AmazonS3Exception error when running CTAS using Athena engine version 3

We are experiencing the following issue, that is blocking us from upgrading to **Athena engine version 3**. It's important to note that the query runs **successfully** when using Athena engine version 2. The S3 bucket being used denies uploads of unencrypted objects, in case that could be relevant. Example query: ```sql CREATE TABLE ctas_1772133c_00c9_440e_934e_c35ac928fdcd WITH ( format = 'JSON', external_location = 's3://athena-query-results-123412341234/tables/ctas_1772133c_00c9_440e_934e_c35ac928fdcd/' ) AS SELECT name FROM users LIMIT 10 ``` Error message received (masked, except for the request/query ids): > Error committing manifest file Access Denied (Service: Amazon S3; Status Code: 403; Error Code: AccessDenied; Request ID: NAPVPKQ1F1BHQHF8; S3 Extended Request ID: jeovQuVvA/yuDyjNXg+K10z9oJDxxscRsdYO6A+rd53AkT/tq+ZlxDYwfMazypczaCKmuO8rebo=; Proxy: null), S3 Extended Request ID: jeovQuVvA/yuDyjNXg+K10z9oJDxxscRsdYO6A+rd53AkT/tq+ZlxDYwfMazypczaCKmuO8rebo=. You may need to manually clean the data at location 's3://athena-query-results-123412341234/Unsaved/2022/11/28/tables/ctas_1772133c_00c9_440e_934e_c35ac928fdcd' before retrying. Athena will not delete data in your account. This query ran against the "default" database, unless qualified by the query. Please post the error message on our forum or contact customer support with Query Id: 13a43d53-33d6-4536-98c8-ad116bc12637 This is the S3 bucket policy, for the bucket where data should be saved to: ```json { "Version": "2012-10-17", "Statement": [ { "Sid": "DenyIncorrectEncryptionHeader", "Effect": "Deny", "Principal": "*", "Action": "s3:PutObject", "Resource": "arn:aws:s3:::athena-query-results-123412341234/*", "Condition": { "StringNotEquals": { "s3:x-amz-server-side-encryption": "AES256" } } }, { "Sid": "DenyUnEncryptedObjectUploads", "Effect": "Deny", "Principal": "*", "Action": "s3:PutObject", "Resource": "arn:aws:s3:::athena-query-results-123412341234/*", "Condition": { "Null": { "s3:x-amz-server-side-encryption": "true" } } } ] } ```
asked 4 days ago