You need to allowlist Hightouch's IP addresses to let our systems contact your warehouse. Reference our networking docs to determine which IPs you need to allowlist.
In Hightouch, go to Sources or click https://app.hightouch.com/sources.
Click "Create Source."
Select Amazon Athena.
Select a Region.
Enter your AWS Access Key ID and Secret Access Key. The credentials must be for a user who has permission to access Athena and the Output Location in S3. See the Permissions section below for more details. After you enter a region and credentials, more options appear.
Select an Athena Work Group that you have previously set up in AWS.
If your Work Group doesn't have an Output Location configured, enter an Output Location for the query results. This is an S3 path.
Select a Data Catalog.
Select a Database.
Click "Test" to test the connection. Hightouch is able to successfully connect, click the "Complete" button at the bottom of the page
The AWS user that you use to connect to Athena must have the following permissions.
Read and list permissions for Athena resources and execute permissions for Athena queries:
Read and write permissions for the output location in S3 to both write the results to S3 and read them back:
See the AWS managed policy
Read more about Athena data types in the Athena documentation.