What Changed
The AWS Athena Function App connector received two critical updates: Azure Functions extension bundle upgrade from v3 to v4+ range, and a defensive fix to the Python query result parsing logic in GetQueryResults.
Security Impact (Visibility & Fidelity)
Function App Runtime Compatibility: The extension bundle version constraint changed from [3., 4.0.0) to [4., 5.0.0), aligning with Azure Functions runtime v4 requirements. Deployments using newer Azure Functions hosts would fail to load the connector with the previous constraint, resulting in complete automation failure for AWS Athena query orchestration.
Query Result Data Fidelity: The Python parsing logic previously contained an unsafe assumption that query result data cells always contain values (list(dict(data).values())[0]). When AWS Athena returns empty cells or malformed data structures, this would raise an IndexError, causing the entire query result processing to fail. The fix adds defensive handling to populate None for empty cells, ensuring partial results are still processed rather than complete automation failure.
Operational Risk: Without these fixes, deployments running Azure Functions v4+ infrastructure would experience silent failures during connector initialization, while those on compatible runtime would intermittently fail when processing Athena queries containing sparse or empty result sets. Both scenarios create blind spots in AWS log analysis automation workflows.
Affected Files
Solutions/AWSAthena/Playbooks/CustomConnector/AWSAthena_FunctionAppConnector/GetQueryResults/__init__.py
Solutions/AWSAthena/Playbooks/CustomConnector/AWSAthena_FunctionAppConnector/host.json
(packaging artefacts: AWSAthenaFunctionApp.zip)