You can now use Amazon Athena Workgroups – A new resource type that can be used to separate query execution and query history between Users, Teams, or Applications running under the same AWS account. Because Workgroups act as resources, you can use resource-based policies to control access to a Workgroup. For example, if you have two teams or different applications using Athena, you can limit access by assigning them to different Workgroups. You can also separate ad hoc usage from scheduled reports by assigning them to different Workgroups. Queries running in one Workgroup are not visible to users or applications running in a different Workgroup. You can also temporarily disable Workgroups, preventing users from running queries, or permanently delete them. Fine-Grained Access Control for Tables and Databases defined in the Glue Data Catalog can further restrict access to specific databases and tables.