JDBC Driver Error "not authorized to perform: athena:CreatePreparedStatement" Occurs When Refreshing Extract

Issue

The following JDBC driver error occurs when refreshing extract with Athena JDBC driver version 2.0.34 or newer.

[JDBC Driver]You are not authorized to perform: athena:CreatePreparedStatement on the resource
Or
[JDBC Driver]User: arn:aws:Iam::<xxxxxx>:user/tableau_user is not authorized to perform: athena:CreatePreparedStatement on resource

Environment

Tableau Server
Tableau Cloud
Tableau Desktop
Tableau Prep Builder
Amazon Athena
Athena JDBC driver version 2.0.34 or newer

Resolution

Please add the following IAM permissions to allow access to prepared statements*.

athena:create prepared statement
athena:delete prepared statement

Cause

The Athena account does not have the required IAM permissions.

Additional Information

Since no issue with an older Athena JDBC driver version, the JDBC error is considered related to [AJ-466] Ec2InstanceMetadata support in Athena JDBC driver 2.0.34. For more information, see Athena JDBC driver release notes*.

*Although we make every effort to ensure links to external websites are accurate, up to date, and relevant, Tableau cannot take responsibility for the accuracy or freshness of pages maintained by external providers. Contact the external site for answers to questions regarding its content.