We need to restrict users from changing the AWS Athena query result location. Our primary goal is to prevent users from downloading Athena query results. We have managed to restrict downloads by setting restrictions on the query result location. However, we are unable to prevent users from changing the result location.

Is there any way to either:

1. Restrict users from changing the Athena query result location?
2. Set up alerts to notify us when a user changes the query result location?

Any solutions or ideas would be greatly appreciated.

I checked Athena policies but didn’t find anything significant or relevant to our use-case.