Redshift

Documentation Index

Fetch the complete documentation index at: https://import-docs.prequel.co/llms.txt

Use this file to discover all available pages before exploring further.

​

Step 1: Find cluster connection details

1

Select the cluster

1. In the Redshift console, click Clusters.
2. Select the cluster you would like to connect.

2

Make note of cluster details

In the General information pane, make note of the Endpoint details, the Cluster identifier, and the AWS region that the cluster is hosted in. You may need to use the copy icon to copy the full details to discover the full endpoint and port number.

​

Step 2: Whitelist connection

1

Open the VPC security group

1. In the Redshift console, click Clusters.
2. Select the cluster you would like to connect.
3. Click the Properties tab.
4. Scroll down to the Network and security settings section.
5. In the VPC security group field, select a security group to open it.

2

Edit inbound rules

1. In the Security Groups window, click Inbound rules.
2. Click Edit inbound rules.
3. In the Edit the Inbound rules window, create a custom TCP rule for the static IP:
   1. Select Custom TCP in the drop-down menu.
   2. Enter your Redshift port number (likely 5439).
   3. Enter the static IP address.
   4. Click Add rule.

​

Step 3: Create a Limited User

CREATE USER <username> PASSWORD '<password>';

GRANT USAGE ON SCHEMA <schema> TO <username>;
GRANT SELECT ON ALL TABLES IN SCHEMA <schema> TO <username>;

​

Step 4: Configure AWS authentication

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": "redshift:GetClusterCredentials",
            "Resource": [
                "arn:aws:redshift:REGION_NAME:ACCOUNT_ID:dbuser:CLUSTER_NAME/USERNAME",
                "arn:aws:redshift:REGION_NAME:ACCOUNT_ID:dbname:CLUSTER_NAME/DATABASE_NAME"
            ]
        }
    ]
}

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "sts:AssumeRoleWithWebIdentity"
      ],
      "Principal": {
        "Federated": "accounts.google.com"
      },
      "Condition": {
        "StringEquals": {
          "accounts.google.com:sub": "<some_service_account_identifier>"
        }
      }
    }
  ]
}

​

Step 5: Submit your connection details

1. The name is a descriptive name of the source
2. The host (e.g., source-redshift.cw1drqwgbdue.us-east-1.redshift.amazonaws.com)
3. The port [e.g., 5439]
4. The database for your Redshift cluster.
5. The cluster identifier from Step 1.
6. The AWS region from Step 1.
7. The username from Step 3.
8. The authentication credentials from Step 4:
   • If using an IAM role: the IAM role ARN
   • If using AWS access keys: the password from Step 3, the AWS access key ID, and the AWS secret access key