Communities
A collaborative platform to connect and grow with like-minded Informaticans across the globe
Product Communities
Connect and collaborate with Informatica experts and champions
Discussions
Have a question? Start a Discussion and get immediate answers you are looking for
User Groups
Customer-organized groups that meet online and in-person. Join today to network, share ideas, and get tips on how to get the most out of Informatica
Get Started
Community Guidelines
Knowledge Center
Troubleshooting documents, product guides, how to videos, best practices, and more
Knowledge Base
One-stop self-service portal for solutions, FAQs, Whitepapers, How Tos, Videos, and more
Support TV
Video channel for step-by-step instructions to use our products, best practices, troubleshooting tips, and much more
Documentation
Information library of the latest product documents
Velocity (Best Practices)
Best practices and use cases from the Implementation team
Learn
Rich resources to help you leverage full capabilities of our products
Trainings
Role-based training programs for the best ROI
Certifications
Get certified on Informatica products. Free, Foundation, or Professional
Product Learning Paths
Free and unlimited modules based on your expertise level and journey
Resources
Library of content to help you leverage the best of Informatica products
Tech Tuesdays Webinars
Most popular webinars on product architecture, best practices, and more
Product Availability Matrix
Product Availability Matrix statements of Informatica products
SupportFlash
Monthly support newsletter
Support Documents
Informatica Support Guide and Statements, Quick Start Guides, and Cloud Product Description Schedule
Product Lifecycle
End of Life statements of Informatica products
Ideas
Events
Change Request Tracking
Marketplace
English
  • Administrator
  • All Products

Table of Contents

Search

  1. Preface
  2. Connectors and connections
  3. Connection configuration
  4. ActiveCampaign connection properties
  5. Adabas CDC Connection Properties
  6. Adabas connection properties
  7. Adaptive Insights Connection Properties
  8. Adobe Analytics connection properties
  9. Adobe Analytics Mass Ingestion connection properties
  10. Adobe Experience Platform connection properties
  11. Advanced FTP Connection properties
  12. Advanced FTP V2 connection properties
  13. Advanced FTPS connection properties
  14. Advanced FTPS V2 connection properties
  15. Advanced SFTP connection properties
  16. Advanced SFTP V2 connection properties
  17. Amazon Athena connection properties
  18. Amazon Aurora connection properties
  19. Amazon DynamoDB connection properties
  20. Amazon DynamoDB V2 connection properties
  21. Amazon Kinesis connection properties
  22. Amazon Redshift connection properties
  23. Amazon Redshift V2 connection properties
  24. Amazon S3 connection properties
  25. Amazon S3 V2 connection properties
  26. Amplitude connection properties
  27. AMQP connection properties
  28. Anaplan V2 connection properties
  29. Ariba V2 connection properties
  30. AS2 connection properties
  31. BigMachines connection properties
  32. Birst Cloud Connect connection properties
  33. Box connection properties
  34. Business 360 connection properties
  35. Business 360 Events connection properties
  36. Business 360 FEP connection properties
  37. CallidusCloud Commissions connection properties
  38. CallidusCloud File Processor connection properties
  39. Cassandra V2 connection properties
  40. Chatter connection properties
  41. Cloud Integration Hub connection properties
  42. Concur connection properties
  43. Concur V2 connection properties
  44. Couchbase connection properties
  45. Coupa connection properties
  46. Coupa V2 connection properties
  47. Cvent connection properties
  48. Databricks connection properties
  49. Datacom CDC Connection Properties
  50. Datacom Connection Properties
  51. Db2 Data Map connection properties
  52. Db2 for i CDC connection properties
  53. Db2 for i connection properties
  54. Db2 for i Database Ingestion connection properties
  55. Db2 for LUW CDC connection properties
  56. Db2 for LUW Database Ingestion connection properties
  57. Db2 for z/OS Bulk Load connection properties
  58. Db2 for z/OS CDC connection properties
  59. Db2 for z/OS connection properties
  60. Db2 for zOS Database Ingestion connection properties
  61. Db2 for z/OS Image Copy connection properties
  62. Db2 for z/OS Unload File connection properties
  63. DB2 Loader connection properties
  64. Db2 Warehouse on Cloud connection properties
  65. Domo connection properties
  66. Dropbox connection properties
  67. Elasticsearch connection properties
  68. Eloqua Bulk API connection properties
  69. Eloqua REST connection properties
  70. FHIR connection properties
  71. File List connection properties
  72. File Processor connection properties
  73. FileIO connection properties
  74. Flat file connections
  75. FTP/SFTP connections
  76. Google Ads connection properties
  77. Google Analytics connection properties
  78. Google Analytics Mass Ingestion connection properties
  79. Google BigQuery connection properties
  80. Google BigQuery V2 connection properties
  81. Google Bigtable connection properties
  82. Google Cloud Storage connection properties
  83. Google Cloud Storage V2 connection properties
  84. Google Drive connection properties
  85. Google PubSub - Streaming Ingestion and Replication connection properties
  86. Google PubSub connection properties
  87. Google PubSub V2 connection properties
  88. Google Sheets connection properties
  89. Google Sheets V2 connection properties
  90. Greenplum connection properties
  91. Hadoop connection properties
  92. Hadoop Files connection properties
  93. Hadoop Files V2 connection properties
  94. Hive connection properties
  95. HubSpot connection properties
  96. IBM MQ connection properties
  97. IDMS CDC connection properties
  98. IDMS connection properties
  99. IMS CDC Connection Properties
  100. IMS connection properties
  101. JD Edwards EnterpriseOne connection properties
  102. JDBC connection properties
  103. JDBC V2 connection properties
  104. JIRA Cloud connection properties
  105. Jira connection properties
  106. JMS connection properties
  107. JSON Target connection properties
  108. Kafka connection properties
  109. Klaviyo connection properties
  110. LDAP connection properties
  111. Magento V1 connection properties
  112. Mailchimp connection properties
  113. Marketo V3 connection properties
  114. Microsoft Access connection properties
  115. Microsoft Azure Blob Storage connection properties
  116. Microsoft Azure Blob Storage V2 connection properties
  117. Microsoft Azure Blob Storage V3 connection properties
  118. Microsoft Azure Cosmos DB SQL API connection properties
  119. Microsoft Azure Data Lake Storage Gen2 connection properties
  120. Microsoft Azure DocumentDB Connection Properties
  121. Microsoft Azure Event Hub connection properties
  122. Microsoft Azure SQL Data Warehouse - Database Ingestion connection properties
  123. Microsoft Azure SQL Data Warehouse connection properties
  124. Microsoft Azure SQL Data Warehouse V2 connection properties
  125. Microsoft Azure Synapse Analytics Database Ingestion connection properties
  126. Microsoft Azure Synapse SQL connection properties
  127. Microsoft CDM Folders V2 connection properties
  128. Microsoft Dynamics 365 for Operations connection properties
  129. Microsoft Dynamics 365 for Sales connections
  130. Microsoft Dynamics 365 Mass Ingestion connection properties
  131. Microsoft Dynamics AX V3 connection properties
  132. Microsoft Dynamics CRM connection properties
  133. Microsoft Dynamics NAV connection properties
  134. Microsoft Excel connection properties
  135. Microsoft Fabric Data Warehouse connection properties
  136. Microsoft Fabric Lakehouse connection properties
  137. Microsoft Fabric OneLake connection properties
  138. Microsoft Power BI Connection Properties
  139. Microsoft SharePoint connection properties
  140. Microsoft Sharepoint Online connection properties
  141. Microsoft SQL Server CDC connection properties
  142. Microsoft SQL Server connection properties
  143. Mixpanel connection properties
  144. MLLP connection properties
  145. MongoDB Mass Ingestion connection properties
  146. MongoDB connection properties
  147. MongoDB V2 connection properties
  148. MQTT connection properties
  149. MRI Software connection properties
  150. MySQL CDC connection properties
  151. MySQL connection properties
  152. Netezza connection properties
  153. NetSuite connection properties
  154. NetSuite Mass Ingestion connection properties
  155. NetSuite RESTlet V2 connection properties
  156. NICE Satmetrix connection properties
  157. OData connections properties
  158. OData consumer connection properties
  159. OData V2 Protocol Reader connection properties
  160. OData V2 Protocol Writer connection properties
  161. ODBC connection properties
  162. OpenAir connection properties
  163. Open Table connection properties
  164. Oracle connection properties
  165. Oracle Autonomous Database connections
  166. Oracle Business Intelligence Publisher connection properties
  167. Oracle CDC V2 connection properties
  168. Oracle Cloud Object Storage connections
  169. Oracle CRM Cloud V1 connections properties
  170. Oracle CRM On Demand connection properties
  171. Oracle Database Ingestion connection properties
  172. Oracle Financials Cloud V1 connection properties
  173. Oracle Fusion Cloud Mass Ingestion connection properties
  174. Oracle HCM Cloud V1 connection properties
  175. Pinecone connection properties
  176. PostgreSQL CDC connection properties
  177. PostgreSQL connection properties
  178. Power BI connection properties
  179. QuickBooks V2 Connection Properties
  180. Redis connection properties
  181. REST API connection properties
  182. REST V2 connection properties
  183. REST V3 Connection Properties
  184. Salesforce Analytics connection properties
  185. Salesforce Commerce Cloud connection properties
  186. Salesforce connection properties
  187. Salesforce Data Cloud connection properties
  188. Salesforce Marketing Cloud connection properties
  189. Salesforce Mass Ingestion connection properties
  190. Salesforce Pardot connection properties
  191. SAP connection properties
  192. SAP ADSO Writer connection properties
  193. SAP BAPI connection properties
  194. SAP BW Connector connection properties
  195. SAP BW BEx Query connection properties
  196. SAP HANA CDC Connection Properties
  197. SAP HANA connection properties
  198. SAP HANA Database Ingestion connection properties
  199. SAP IQ connection properties
  200. SAP Mass Ingestion connection properties
  201. SAP OData V2 connection properties
  202. SAP OData V4 connection properties
  203. SAP ODP Extractor connection properties
  204. SAP Table Connector connection properties
  205. SAS connection properties
  206. Satmetrix connection properties
  207. Sequential File connection properties
  208. ServiceNow connection properties
  209. ServiceNow Mass Ingestion connection properties
  210. Shopify connection properties
  211. Snowflake connection properties
  212. Snowflake Data Cloud connection properties
  213. Stripe connection properties
  214. SuccessFactors LMS connection properties
  215. Successfactor ODATA connection properties
  216. SuccessFactors SOAP connection properties
  217. SurveyMonkey connection properties
  218. Tableau V2 connection properties
  219. Tableau V3 connection properties
  220. Teradata connection properties
  221. UKGPro V2 connection properties
  222. UltiPro connection properties
  223. VSAM CDC connection properties
  224. VSAM connection properties
  225. Web Service Consumer connection properties
  226. WebServices V2 connection properties
  227. Workday connection properties
  228. Workday Mass Ingestion connection properties
  229. Workday V2 connection properties
  230. Xactly connection properties
  231. Xero connection properties
  232. XML Source connection properties
  233. XML Target connection properties
  234. Yellowbrick Data Warehouse connection properties
  235. Zendesk connection properties
  236. Zendesk Mass Ingestion connection properties
  237. Zendesk V2 connection properties
  238. Zuora AQuA Connection properties
  239. Zuora connection properties
  240. Zuora Multi-Entity connection properties
  241. Zuora REST V2 connection properties

Connections

Connections

Back Next

Generate temporary security credential policies for Amazon Redshift

Generate temporary security credential policies for Amazon Redshift

To use the temporary security credentials to connect to Amazon Redshift, both the IAM user and IAM role require policies.
The following section lists the policies required for the IAM user and IAM role:
IAM user
An IAM user must have the
sts:AssumeRole
 policy to use the temporary security credentials in the same or different AWS account. The IAM user credentials are used to key-in the Redshift access key and Redshift secret key in the connection properties.
The following sample policy allows an IAM user to use the temporary security credentials in an AWS account: 
{
"Version":"2012-10-17", 
"Statement":
   { "Effect":"Allow", 
"Action":"sts:AssumeRole", 
"Resource":"arn:aws:iam::<ACCOUNT-HYPHENS>:role/<REDSHIFT-IAM-ROLE-NAME>" 
   }
}
To run mappings in advanced mode, ensure to assign this policy to the Worker node role.
Redshift IAM role trust policy
The Redshift IAM role policy pertains to the role that is specified in the Redshift IAM Role ARN. An IAM role must have a trust policy attached with it to allow the IAM user to access Redshift using the temporary security credentials.
The following policy is a sample trust policy: 
{
"Version":"2012-10-17", 
"Statement":[
         { 
         "Effect":"Allow", 
         "Principal":{ "AWS":"arn:aws:iam::AWS-account-ID:<IAM-USER>" },
         "Action":"sts:AssumeRole" 
          }  
        ]
       }
}
For example, you can specify the role or user in the following format: 
{
"Version": "2012-10-17",
"Statement": [
    {
"Effect": "Allow",
"Principal": {

"AWS": "arn:aws:iam::<AWS-account>:role/<name-of-the-role>"

    },
       "Action": "sts:AssumeRole"
    }
 ]
}


{
"Version": "2012-10-17",
"Statement": [
    {
"Effect": "Allow",
"Principal": {

"AWS": " arn:aws:iam::<AWS-account>:user/<name-of-the-user>"
 
    },
       "Action": "sts:AssumeRole"
    }
 ]
}
Redshift IAM role trust policy for mappings in advanced mode
An IAM role must have a trust policy attached with it to allow the worker node to assume the Redshift role and access Amazon Redshift through the AssumeRole.
The following policy is a sample trust policy: 
{ 
"Effect": "Allow", 
"Principal": { "AWS": "arn:aws:iam::<ACCOUNT-ID>:role/<WORKER-NODE-ROLE-ARN>" }, 
"Action": "sts:AssumeRole" 
}
Minimum permission policies of the Redshift IAM role
The following policy shows the permissions required to the Redshift IAM Role, which will be assumed by an IAM user to connect to the Redshift database using an existing Amazon Redshift user: 
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
          "redshift:GetClusterCredentials",

          "redshift:DescribeClusters"
            ],

"Resource": [
          "arn:aws:redshift:<REGION>:<ACCOUNT-ID>:dbuser:<Cluster_Identifier>/<USER_NAME>",

          "arn:aws:redshift:<REGION>:<ACCOUNT-ID>:dbname:<Cluster_Identifier>/<DATABASE_NAME>"

            ]

}
}
]
}
}
The following policy shows the permissions needed to be attached to the Redshift IAM Role, which will be assumed by an IAM user to connect to the Redshift database with a newly created user by the
Auto create DBUser
 check box: 
{

"Version": "2012-10-17",

"Statement": [

{

"Effect": "Allow",

"Action": [
          "redshift:GetClusterCredentials",

          "redshift:DescribeClusters",

          "redshift:CreateClusterUser",

          "redshift:JoinGroup"
            ],

"Resource": [
          "arn:aws:redshift:<REGION>:<ACCOUNT-ID>:dbuser:<Cluster_Identifier>/<USER_NAME>",

          "arn:aws:redshift:<REGION>:<ACCOUNT-ID>:dbname:<Cluster_Identifier>/<DATABASE_NAME>",

          "arn:aws:redshift:<REGION>:<ACCOUNT-ID>:dbgroup:<Cluster_Identifier>/<GROUP_NAME>"
            ]
}

}

]

}
0 COMMENTS
We’d like to hear from you!