To connect to Redshift using an existing database user by using an IAM user to assume a role, specify the database user, Redshift access key and secret key, and the Redshift IAM role in the connection properties.

For an IAM user to assume a role, attach the following AWS IAM user policies in the AWS console:

AWS IAM user policy for the Redshift access key and secret key:

AWS IAM role policy of the Redshift IAM role ARN for an existing database user:

Trust policy that defines which user can assume the Redshift role:

After you define the policies, you can specify the following attributes in the connection properties for an existing database user: