

This is the new *CloudFormation Template Reference Guide*. Please update your bookmarks and links. For help getting started with CloudFormation, see the [AWS CloudFormation User Guide](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/Welcome.html).

# AWS::Athena::WorkGroup ResultConfiguration
<a name="aws-properties-athena-workgroup-resultconfiguration"></a>

The location in Amazon S3 where query and calculation results are stored and the encryption option, if any, used for query and calculation results. These are known as "client-side settings". If workgroup settings override client-side settings, then the query uses the workgroup settings.

## Syntax
<a name="aws-properties-athena-workgroup-resultconfiguration-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-athena-workgroup-resultconfiguration-syntax.json"></a>

```
{
  "[AclConfiguration](#cfn-athena-workgroup-resultconfiguration-aclconfiguration)" : AclConfiguration,
  "[EncryptionConfiguration](#cfn-athena-workgroup-resultconfiguration-encryptionconfiguration)" : EncryptionConfiguration,
  "[ExpectedBucketOwner](#cfn-athena-workgroup-resultconfiguration-expectedbucketowner)" : String,
  "[OutputLocation](#cfn-athena-workgroup-resultconfiguration-outputlocation)" : String
}
```

### YAML
<a name="aws-properties-athena-workgroup-resultconfiguration-syntax.yaml"></a>

```
  [AclConfiguration](#cfn-athena-workgroup-resultconfiguration-aclconfiguration): 
    AclConfiguration
  [EncryptionConfiguration](#cfn-athena-workgroup-resultconfiguration-encryptionconfiguration): 
    EncryptionConfiguration
  [ExpectedBucketOwner](#cfn-athena-workgroup-resultconfiguration-expectedbucketowner): String
  [OutputLocation](#cfn-athena-workgroup-resultconfiguration-outputlocation): String
```

## Properties
<a name="aws-properties-athena-workgroup-resultconfiguration-properties"></a>

`AclConfiguration`  <a name="cfn-athena-workgroup-resultconfiguration-aclconfiguration"></a>
Indicates that an Amazon S3 canned ACL should be set to control ownership of stored query results. Currently the only supported canned ACL is `BUCKET_OWNER_FULL_CONTROL`. This is a client-side setting. If workgroup settings override client-side settings, then the query uses the ACL configuration that is specified for the workgroup, and also uses the location for storing query results specified in the workgroup. See [EnforceWorkGroupConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfiguration.html#cfn-athena-workgroup-workgroupconfiguration-enforceworkgroupconfiguration).  
*Required*: No  
*Type*: [AclConfiguration](aws-properties-athena-workgroup-aclconfiguration.md)  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`EncryptionConfiguration`  <a name="cfn-athena-workgroup-resultconfiguration-encryptionconfiguration"></a>
If query results are encrypted in Amazon S3, indicates the encryption option used (for example, `SSE_KMS` or `CSE_KMS`) and key information. This is a client-side setting. If workgroup settings override client-side settings, then the query uses the encryption configuration that is specified for the workgroup, and also uses the location for storing query results specified in the workgroup. See [EnforceWorkGroupConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfiguration.html#cfn-athena-workgroup-workgroupconfiguration-enforceworkgroupconfiguration) and [Override client-side settings](https://docs.aws.amazon.com/athena/latest/ug/workgroups-settings-override.html).  
*Required*: No  
*Type*: [EncryptionConfiguration](aws-properties-athena-workgroup-encryptionconfiguration.md)  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`ExpectedBucketOwner`  <a name="cfn-athena-workgroup-resultconfiguration-expectedbucketowner"></a>
The account ID that you expect to be the owner of the Amazon S3 bucket specified by `ResultConfiguration:OutputLocation`. If set, Athena uses the value for `ExpectedBucketOwner` when it makes Amazon S3 calls to your specified output location. If the `ExpectedBucketOwner` account ID does not match the actual owner of the Amazon S3 bucket, the call fails with a permissions error.  
This is a client-side setting. If workgroup settings override client-side settings, then the query uses the `ExpectedBucketOwner` setting that is specified for the workgroup, and also uses the location for storing query results specified in the workgroup. See [EnforceWorkGroupConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfiguration.html#cfn-athena-workgroup-workgroupconfiguration-enforceworkgroupconfiguration).  
*Required*: No  
*Type*: String  
*Pattern*: `^[0-9]+$`  
*Minimum*: `12`  
*Maximum*: `12`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`OutputLocation`  <a name="cfn-athena-workgroup-resultconfiguration-outputlocation"></a>
The location in Amazon S3 where your query results are stored, such as `s3://path/to/query/bucket/`. To run a query, you must specify the query results location using either a client-side setting for individual queries or a location specified by the workgroup. If workgroup settings override client-side settings, then the query uses the location specified for the workgroup. If no query location is set, Athena issues an error. For more information, see [Work with query results and recent queries](https://docs.aws.amazon.com/athena/latest/ug/querying.html) and [EnforceWorkGroupConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-workgroupconfiguration.html#cfn-athena-workgroup-workgroupconfiguration-enforceworkgroupconfiguration).  
*Required*: No  
*Type*: String  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)