winget install --id Amazon.AthenaODBCDriver.2About Amazon Athena ODBC Driver
Use an ODBC connection to connect to Athena from third-party SQL client tools and applications.
What's new in 2.1.0.0
The Amazon Athena The Amazon Athena ODBC v2.1.0.0 driver includes security improvements. This release enhances authentication flows, query processing, and transport security. We recommend upgrading to this version as soon as possible. Breaking changes - SSL certificate validation enabled by default – The driver now enforces SSL certificate verification when connecting to identity providers. If you use a local identity provider without a valid SSL certificate, you must explicitly set SSL_Insecure=1 in your connection string. For more information, see SSL insecure (IdP). - TLS 1.2 minimum enforced – The driver no longer accepts TLS 1.0 or TLS 1.1 connections to identity providers. All IdP connections now require TLS 1.2 or later. - BrowserSSOOIDC authentication flow updated – The BrowserSSOOIDC plugin now uses Authorization Code with PKCE instead of Device Code Authorization. A new optional parameter listen_port (default 7890) is available for the OAuth 2.0 callback server. You may need to allowlist this port on your network. The default scope has changed to sso:account:access. For more information, see Browser SSO OIDC. Improvements - BrowserSSOOIDC – Migrated from Device Code flow to Authorization Code with PKCE for improved security. - BrowserAzureAD – Added PKCE (Proof Key for Code Exchange) to the OAuth 2.0 authorization flow to prevent authorization code interception attacks. - BrowserSAML – Added RelayState CSRF protection to prevent SAML token injection attacks. - Credentials cache – Starting in v2.1.0.0, cached credentials are stored as plaintext JSON in the user-pro...
Version history
| Version | Updated | Notes |
|---|---|---|
| 2.1.0.0 | Unknown | The Amazon Athena The Amazon Athena ODBC v2.1.0.0 driver includes security improvements. This release enhances authentication flows, query processing, and transport security. We recommend upgrading to this version as soo... |
| 2.0.6.0 | Unknown | Improvements - Browser Trusted Identity Propagation authentication plugin – Added a new authentication plugin to support browser-based OpenID Connect (OIDC) authentication with trusted identity propagation. This plugin p... |
| 2.0.5.1 | Unknown | Fixes The Amazon Athena ODBC v2.0.5.1 driver contains the following fixes to browser-based authentication plugins. - Implemented validation for login URL and schema checking. - Improved browser launch mechanism on Linux... |
| 2.0.5.0 | Unknown | Improvements - JWT Trusted Identity Provider (TIP) authentication plugin – Added a new authentication plugin to support JWT Trusted Identity Provider (TIP) integration with ODBC drivers. This authentication type allows y... |
| 2.0.4.0 | Unknown | The Amazon Athena ODBC v2.0.4.0 driver contains the following improvements and fixes. Improvements - Result Fetcher – The driver now automatically selects the method to download query results. This removes the need to ma... |
| 2.0.3.0 | Unknown | Improvements - Added MFA support for the Okta authentication plugin on Linux and Mac platforms. - Both the athena-odbc.dll library and the AmazonAthenaODBC-2.x.x.x.msi installer for Windows are now signed. - Updated the... |