Power BI Service Data Source, Athena, and Key Rota...

catcollector · ‎07-28-2022

Hello, I apoloigize for a long post... I could use some guidance.

Our current setup:

Windows EC2 instance hosting on-premises Gateway and Athena ODBC Driver (authentication is set to IAM Credential)
Power BI Service has data source with type ODBC and authentication is set to "Basic" (uses the same IAM credential in ODBC driver)

In both these scenarios, we are required to rotate the IAM credential. So, we schedule for IAM user rotation, then we have to update the ODBC driver credential in EC2 instance, and update the username and password in the ODBC data source in PBI...

What we're planning to do:

Windows EC2 instance hosting on-premises Gateway and Athena ODBC Driver (authentication is set to default credential or Instance Profile)
Power BI Service has data source with type ODBC and authentication is set to "Anonymous"

The reason for choosing default credential or Instance Profile is so that authentication would assume ec2 instance role. Then, in PBI, the data source would be set to anonymous. We believe this removes the requirement to rotate keys. But, we don't quite understand the impact of an "Anonymous" authentication. Which makes it hard to take this path.

Does anyone have any guidance on this topic? Thank you, all.

sandeee · ‎05-14-2024

Hi @catcollector

I am on the same boat.

We have an EC2 instance where we have configured Athena with Instance Profile authentication in ODBC application and also installed on-premises data gateway.

In PBI service, I have created a new Athena connection associated with this gateway. So far so good.

For a published report, I am trying to associate this new connection but it display in the list box, at all.

Do you have any idea on how to resolve this?

sandeee · ‎05-14-2024

Hi @catcollector

I am on the same boat.

We have an EC2 instance where we have configured Athena with Instance Profile authentication in ODBC application and also installed on-premises data gateway.

In PBI service, I have created a new Athena connection associated with this gateway. So far so good.

For a published report, I am trying to associate this new connection but it display in the list box, at all.

Do you have any idea on how to resolve this?

Anonymous · ‎07-31-2022

Hi @catcollector ,

Privacy Levels is set to Combine data according to your Privacy Level settings for each source by default, which means that Privacy Levels are enforced.

The Ignore the Privacy levels and potentially improve performance does not work in the Power BI service. As such, Power BI Desktop reports with this setting enabled, which are then published to the Power BI service, do not reflect this behavior when used in the service. However, the privacy levels are available on the personal gateway.

More details : Power BI Desktop privacy levels

If I have misunderstood your meaning, please provide more details.

Best Regards

Community Support Team _ Polly

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

catcollector · ‎08-01-2022

Hi, I apologize. I did not understand your response.

My question was around "Anonymous" authentication for ODBC data source. We wanted to understand the impact of an "ANonymous" authentication. What's actually occurring in the background?