Create a dedicated IAM role for Athena connections