Amazon Redshift Connectors

Back Next

Create a minimal Amazon IAM policy

Create an Amazon IAM policy and define the required permissions to stage the data in Amazon S3 when you want to read data from and write data to Amazon Redshift.

Use the following minimum required permissions to stage the data in Amazon S3:

PutObject

GetObject

DeleteObject

ListBucket

GetBucketPolicy

You can use the following sample Amazon IAM policy:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "s3:PutObject",
                "s3:GetObject",
                "s3:DeleteObject",
                "s3:ListBucket",
																"s3:GetBucketPolicy"
                      ],
            "Resource": [
                "arn:aws:s3:::<bucket_name>/*",
                "arn:aws:s3:::<bucket_name>"
            ]
        }
    ]
}

You must make sure that the Amazon S3 bucket and Amazon Redshift cluster reside in the same region to run a session successfully.

The supported regions are:

Asia Pacific (Mumbai)

Asia Pacific (Seoul)

Asia Pacific (Singapore)

Asia Pacific (Sydney)

Asia Pacific (Tokyo)

AWS GovCloud

Canada (Central)

China (Bejing)

EU (Ireland)

EU (Frankfurt)