The Agent Skills Directory

[Managed AWS Command Execution]: The skill uses standard AWS CLI commands (e.g., aws athena create-system-table-configuration) to manage service features.
These operations are executed within the user's authenticated AWS environment and follow standard service management patterns.
**[Sensitive Data Handling
Athena Query Metadata]:** The skill acknowledges that the query_executions table captures sensitive information such as query_string and principal_arn.
It provides explicit security configurations to manage this, including detailed KMS key policy examples and instructions for customer-managed encryption.
[Least-Privilege Guidance]: A specific IAM policy is provided to restrict access to the underlying S3 Table bucket (aws-athena).
This demonstrates a strong security posture by encouraging the restriction of permissions to only the necessary resources rather than using global wildcards.
[SQL Injection Prevention]: The instructions mandate the use of parameterized queries (? placeholders) when dealing with untrusted values in Athena SQL.
This is a standard best practice to prevent SQL injection when querying metadata that contains user-supplied text.

querying-aws-athena