Athena Workgroups can be configured to encrypt query results based on workgroups. Workgroup settings can be set to override client-side settings so that all queries that run in the workgroup are encrypted. Encryption helps protect the integrity and confidentiality of the data. For more information, see the AWS documentation.
References:
https://docs.aws.amazon.com/athena/latest/ug/encrypting-query-results-stored-in-s3.html
In AWS Console -
In Terraform -
References:
https://docs.aws.amazon.com/athena/latest/ug/encrypting-query-results-stored-in-s3.html
https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/athena_workgroup#encryption-configuration