Amazon Redshift Connectors

Back Next

Create a minimal Amazon IAM policy

To stage the data in Amazon S3, use the following minimum required permissions:

PutObject

GetObject

DeleteObject

ListBucket

ListBucketMultipartUploads. Applicable only for mappings in advanced mode.

You can use the following sample Amazon IAM policy:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "s3:PutObject",
                "s3:GetObject",
                "s3:DeleteObject",
                "s3:ListBucket",
				"s3:ListBucketMultipartUploads"
                      ],
            "Resource": [
                "arn:aws:s3:::<bucket_name>/*",
                "arn:aws:s3:::<bucket_name>"
            ]
        }
    ]
}

You can specify the Amazon S3 bucket name in the source

and target

advanced properties.

For mappings in advanced mode, you can use different AWS accounts within the same AWS region. Make sure that the Amazon IAM policy confirms access to the AWS accounts specified in mappings.

The

Test Connection

does not validate the IAM policy assigned to users.

Authentication tasks

Download Guide

Watch

Comments