To assume a role, specify the access key and secret key in the connection properties. You can attach the required permission and trust policies to the Redshift IAM Role ARN to assume a role.

To enable the EC2 role, select the

Use EC2 Role to Assume Role

check box in the connection properties. The Amazon EC2 role can assume another IAM role from the same or different AWS account without a permanent Redshift access key and secret key.