Athena workgroups should have logging enabled

Description

Amazon Athena workgroups should have logging enabled to track and monitor query activities. Logging provides audit records that help detect security breaches, investigate incidents, and comply with regulations. When enabled, Athena publishes query metrics to Amazon CloudWatch, enhancing accountability and transparency of query operations within the workgroup.

Remediation

Enable CloudWatch query metrics for your Athena workgroup by setting the PublishCloudWatchMetricsEnabled parameter to true in the workgroup configuration. For guidance on enabling logging for an Athena workgroup, refer to the Enable CloudWatch query metrics in Athena section of the Amazon Athena User Guide.