title: Sanitizing SQL query parameters in AWS Athena
body: <p>In AWS Athena, there doesn't appear to be a good way to pass parameters into the SQL query. The typical way to execute is from a <code>boto3</code> <a href="http://boto3.readthedocs.io/en/latest/reference/services/athena.html#Athena.Client.start_query_execution" rel="noreferrer">call</a>,</p>
  
  <pre><code>response = client.start_query_execution(
      QueryString='string',
      ClientRequestToken='string',
      QueryExecutionContext={
          'Database': 'string'
      },
      ResultConfiguration={
          'OutputLocation': 'string',
          'EncryptionConfiguration': {
              'EncryptionOption': 'SSE_S3'|'SSE_KMS'|'CSE_KMS',
              'KmsKey': 'string'
          }
      }
  )
  </code></pre>
  
  <p>If I need to pass parameters to the QueryString, I need to sanitize it to avoid injection attacks. How do I clean the input?</p>