github.com/aquasecurity/trivy-iac@v0.8.1-0.20240127024015-3d8e412cf0ab/avd_docs/aws/athena/AVD-AWS-0007/Terraform.md (about) 1 2 Enforce the configuration to prevent client overrides 3 4 ```hcl 5 resource "aws_athena_workgroup" "good_example" { 6 name = "example" 7 8 configuration { 9 enforce_workgroup_configuration = true 10 publish_cloudwatch_metrics_enabled = true 11 12 result_configuration { 13 output_location = "s3://${aws_s3_bucket.example.bucket}/output/" 14 15 encryption_configuration { 16 encryption_option = "SSE_KMS" 17 kms_key_arn = aws_kms_key.example.arn 18 } 19 } 20 } 21 } 22 23 ``` 24 25 #### Remediation Links 26 - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/athena_workgroup#configuration 27