S3の署名バージョンの対応状況をAthenaで眺めたい

CREATE EXTERNAL TABLE IF NOT EXISTS default.accesslog (
  `backet_owner` string,
  `backet_name` string,
  `timestamp` string,
  `remote_ip` string,
  `requester` string,
  `request_id` string,
  `operation` string,
  `key` string,
  `request_uri` string,
  `http_status` int,
  `error_code` string,
  `bytes_sent` int,
  `object_size` int,
  `total_time` int,
  `turnaround_time` int,
  `referrer` string,
  `user_agent` string,
  `version_id` string,
  `unknown1` string,
  `signature_version` string,
  `algorithm` string,
  `unknown2` string,
  `endpoint` string,
  `tls_version` string 
)  ROW FORMAT SERDE 'org.apache.hadoop.hive.serde2.RegexSerDe'
WITH SERDEPROPERTIES (
  'serialization.format' = '1',
  'input.regex' = '(\\S+) (\\S+) \\[(\\S+ \\S+)\\] (\\S+) (\\S+) (\\S+) (\\S+) (\\S+) \"([^\"]+)\" (\\S+) (\\S+) (\\S+) (\\S+) (\\S+) (\\S+) \"([^\"]+)\" \"(.+?)\" (\\S+) (\\S+) (\\S+) (\\S+) (\\S+) (\\S+) (\\S+)'
) LOCATION 's3://BUCKET_NAME/PREFIX/'
TBLPROPERTIES ('has_encrypted_data'='false');

SELECT * FROM "default"."accesslog" WHERE signature_version = 'SigV2' limit 100;

CREATE EXTERNAL TABLE cloudtrail_logs_BUCKETNAME (
    eventVersion STRING,
    userIdentity STRUCT<
        type: STRING,
        principalId: STRING,
        arn: STRING,
        accountId: STRING,
        invokedBy: STRING,
        accessKeyId: STRING,
        userName: STRING,
        sessionContext: STRUCT<
            attributes: STRUCT<
                mfaAuthenticated: STRING,
                creationDate: STRING>,
            sessionIssuer: STRUCT<
                type: STRING,
                principalId: STRING,
                arn: STRING,
                accountId: STRING,
                userName: STRING>>>,
    eventTime STRING,
    eventSource STRING,
    eventName STRING,
    awsRegion STRING,
    sourceIpAddress STRING,
    userAgent STRING,
    errorCode STRING,
    errorMessage STRING,
    requestParameters STRING,
    responseElements STRING,
    additionalEventData STRING,
    requestId STRING,
    eventId STRING,
    resources ARRAY<STRUCT<
        arn: STRING,
        accountId: STRING,
        type: STRING>>,
    eventType STRING,
    apiVersion STRING,
    readOnly STRING,
    recipientAccountId STRING,
    serviceEventDetails STRING,
    sharedEventID STRING,
    vpcEndpointId STRING
) PARTITIONED BY (
  `region` STRING,
  `dt` STRING
)
ROW FORMAT SERDE 'com.amazon.emr.hive.serde.CloudTrailSerde'
STORED AS INPUTFORMAT 'com.amazon.emr.cloudtrail.CloudTrailInputFormat'
OUTPUTFORMAT 'org.apache.hadoop.hive.ql.io.HiveIgnoreKeyTextOutputFormat'
LOCATION 's3://BUCKET_NAME/AWSLogs/XXXXXXXXXXXXXX/CloudTrail/'
TBLPROPERTIES ('classification'='cloudtrail');

ALTER TABLE default.cloudtrail_logs_BUCKETNAME ADD PARTITION (`region`='ap-northeast-1', `dt`='2019/04/18') location 's3://BUCKET_NAME/AWSLogs/XXXXXXXXXXXXXX/CloudTrail//ap-northeast-1/2019/04/18/';
ALTER TABLE default.cloudtrail_logs_BUCKETNAME ADD PARTITION (`region`='ap-northeast-1', `dt`='2019/04/19') location 's3://BUCKET_NAME/AWSLogs/XXXXXXXXXXXXXX/CloudTrail//ap-northeast-1/2019/04/19/';
ALTER TABLE default.cloudtrail_logs_BUCKETNAME ADD PARTITION (`region`='ap-northeast-1', `dt`='2019/04/20') location 's3://BUCKET_NAME/AWSLogs/XXXXXXXXXXXXXX/CloudTrail//ap-northeast-1/2019/04/20/';

SELECT * FROM (
  SELECT *, json_extract_scalar(additionaleventdata , '$.SignatureVersion') AS signature_version FROM "default"."cloudtrail_logs_BUCKETNAME"
  WHERE 
  region = 'ap-northeast-1'
  AND dt BETWEEN '2019/04/17' AND '2019/04/19'
  -- AND signature_version = 'SigV2' -- なぜか `Column 'signature_version' cannot be resolved` と言われる
)
WHERE
  signature_version = 'SigV2'
LIMIT 10;