github.com/khulnasoft-lab/defsec@v1.0.5-0.20230827010352-5e9f46893d95/avd_docs/aws/athena/AVD-AWS-0007/Terraform.md (about)

     1  
     2  Enforce the configuration to prevent client overrides
     3  
     4  ```hcl
     5   resource "aws_athena_workgroup" "good_example" {
     6     name = "example"
     7   
     8     configuration {
     9       enforce_workgroup_configuration    = true
    10       publish_cloudwatch_metrics_enabled = true
    11   
    12       result_configuration {
    13         output_location = "s3://${aws_s3_bucket.example.bucket}/output/"
    14   
    15         encryption_configuration {
    16           encryption_option = "SSE_KMS"
    17           kms_key_arn       = aws_kms_key.example.arn
    18         }
    19       }
    20     }
    21   }
    22   
    23  ```
    24  
    25  #### Remediation Links
    26   - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/athena_workgroup#configuration
    27