Product logo
DocsBlogPricing

Permissions for @turbot/aws-redshift

Taking a look at permissions and associated grant levels for each permission for Redshift:

PermissionGrant LevelHelp
cloudwatch:DescribeAlarmHistoryMetadata"For console access
cloudwatch:DescribeAlarmsMetadata"For console access
cloudwatch:DescribeAlarmsForMetricMetadata"For console access
cloudwatch:GetMetricStatisticsMetadata"For console access
cloudwatch:ListMetricsMetadata"For console access
ec2:DescribeAccountAttributesMetadataMetadata for console access
ec2:DescribeAddressesMetadataMetadata for console access
ec2:DescribeAvailabilityZonesMetadataMetadata for console access
ec2:DescribeInternetGatewaysMetadataMetadata for console access
ec2:DescribeSecurityGroupsMetadataMetadata for console access
ec2:DescribeSubnetsMetadataMetadata for console access
ec2:DescribeVpcsMetadataMetadata for console access
redshift-data:BatchExecuteStatementAdminGrants permission to execute multiple queries under a single connection.
redshift-data:CancelStatementAdminGrants permission to cancel a running query
redshift-data:DescribeStatementMetadataGrants permission to retrieve detailed information about a statement execution
redshift-data:DescribeTableMetadataGrants permission to retrieve metadata about a particular table
redshift-data:ExecuteStatementAdminGrants permission to execute a query
redshift-data:GetStatementResultMetadataGrants permission to fetch the result of a query
redshift-data:ListDatabasesMetadataGrants permission to list databases for a given cluster
redshift-data:ListSchemasMetadataGrants permission to list schemas for a given cluster
redshift-data:ListStatementsMetadataGrants permission to list queries for a given principal
redshift-data:ListTablesMetadataGrants permission to list tables for a given cluster
redshift:AcceptReservedNodeExchangeOperator
redshift:AddPartnerAdmin
redshift:AssociateDataShareConsumerAdmin
redshift:AuthorizeClusterSecurityGroupIngressAdminAdds an inbound (ingress) rule to an Amazon Redshift security group. Only used for non-VPC clusters
redshift:AuthorizeDataShareAdmin
redshift:AuthorizeEndpointAccessAdmin
redshift:AuthorizeSnapshotAccessAdminAllows cross-account snapshot sharing
redshift:BatchDeleteClusterSnapshotsAdmin"Admins can delete a set of cluster snapshots. High risk
redshift:BatchModifyClusterSnapshotsAdminAdmins can modify the settings for a list of snapshots.
redshift:CancelQueryAdmin
redshift:CancelQuerySessionOperator"Low risk
redshift:CancelResizeAdmin
redshift:CopyClusterSnapshotOperator"Low risk
redshift:CreateAuthenticationProfileAdmin
redshift:CreateEndpointAccessAdmin
redshift:CreateClusterOperator"Low risk
redshift:CreateClusterParameterGroupAdmin"Turbot manages low skill parameters
redshift:CreateClusterSecurityGroupAdminAdministrators can manageto create Amazon Redshift security group. Only used for non-VPC clusters
redshift:CreateClusterSnapshotOperator"Low risk
redshift:CreateClusterSubnetGroupAdmin"Administrators can manage custom subnet groups
redshift:CreateClusterUserAdminAdmins can auto create the specified redshift user if it does not exist.
redshift:CreateEventSubscriptionOperator"Low risk
redshift:CreateHsmClientCertificateAdmin
redshift:CreateHsmConfigurationAdmin
redshift:CreateSavedQueryAdmin
redshift:CreateScheduledActionAdmin
redshift:CreateSnapshotCopyGrantAdminCreates a snapshot copy grant that permits Amazon Redshift to use a customer master key (CMK) from AWS Key Management Service (AWS KMS) to encrypt copied snapshots in a destination region.
redshift:CreateSnapshotScheduleOperator
redshift:CreateTagsOperator
redshift:CreateUsageLimitAdmin
redshift:DeauthorizeDataShareAdmin
redshift:DeleteAuthenticationProfileAdmin
redshift:DeleteClusterAdmin"High risk
redshift:DeleteClusterParameterGroupAdmin"Turbot manages low skill parameters
redshift:DeleteClusterSecurityGroupAdminOnly used for non-VPC clusters
redshift:DeleteClusterSnapshotAdmin"High risk
redshift:DeleteClusterSubnetGroupAdmin"Administrators can manage custom subnet groups
redshift:DeleteEndpointAccessAdmin
redshift:DeleteEventSubscriptionOperator"Low risk
redshift:DeleteHsmClientCertificateAdminHSM not yet supported by Turbot
redshift:DeleteHsmConfigurationAdminHSM not yet supported by Turbot
redshift:DeletePartnerAdmin
redshift:DeleteSavedQueriesAdmin
redshift:DeleteScheduledActionAdmin
redshift:DeleteSnapshotCopyGrantAdminNot supported by Turbot until the use case is better understood.
redshift:DeleteSnapshotScheduleOperator
redshift:DeleteTagsOperator
redshift:DeleteUsageLimitAdmin
redshift:DescribeAccountAttributesMetadata
redshift:DescribeAuthenticationProfilesMetadata
redshift:DescribeClusterDbRevisionsMetadata
redshift:DescribeClusterParameterGroupsMetadata
redshift:DescribeClusterParametersMetadata
redshift:DescribeClusterSecurityGroupsMetadata
redshift:DescribeClusterSnapshotsMetadata
redshift:DescribeClusterSubnetGroupsMetadata
redshift:DescribeClusterTracksMetadataReturns a list of all the available maintenance tracks.
redshift:DescribeClusterVersionsMetadata
redshift:DescribeClustersMetadata
redshift:DescribeDataSharesMetadata
redshift:DescribeDataSharesForConsumerMetadata
redshift:DescribeDataSharesForProducerMetadata
redshift:DescribeDefaultClusterParametersMetadata
redshift:DescribeEndpointAccessMetadata
redshift:DescribeEndpointAuthorizationMetadata
redshift:DescribeEventCategoriesMetadata
redshift:DescribeEventSubscriptionsMetadata
redshift:DescribeEventsMetadata
redshift:DescribeHsmClientCertificatesMetadata
redshift:DescribeHsmConfigurationsMetadata
redshift:DescribeLoggingStatusMetadata
redshift:DescribeNodeConfigurationOptionsMetadata
redshift:DescribePartnersMetadata
redshift:DescribeOrderableClusterOptionsMetadata
redshift:DescribeQueryAdmin
redshift:DescribeReservedNodeOfferingsMetadata
redshift:DescribeReservedNodesMetadata
redshift:DescribeResizeMetadata
redshift:DescribeSavedQueriesAdmin
redshift:DescribeScheduledActionsMetadata
redshift:DescribeSnapshotCopyGrantsMetadata
redshift:DescribeSnapshotSchedulesMetadata
redshift:DescribeStorageMetadata
redshift:DescribeTableAdmin
redshift:DescribeTableRestoreStatusMetadata
redshift:DescribeTagsMetadata
redshift:DescribeUsageLimitsMetadata
redshift:DisableLoggingAdmin
redshift:DisableSnapshotCopyOperator"Low risk since old snapshots are not deleted
redshift:DisassociateDataShareConsumerAdmin
redshift:EnableLoggingAdmin
redshift:EnableSnapshotCopyOperator"Low risk
redshift:ExecuteQueryAdminAdmins can use query editor for creating and listing tables and other info.
redshift:FetchResultsAdmin
redshift:GetClusterCredentialsAdmin
redshift:GetReservedNodeExchangeOfferingsMetadata
redshift:JoinGroupAdmin
redshift:ListDatabasesAdmin
redshift:ListSavedQueriesMetadata
redshift:ListSchemasAdmin
redshift:ListTablesAdmin
redshift:ModifyAquaConfigurationAdmin
redshift:ModifyAuthenticationProfileAdmin
redshift:ModifyClusterAdmin"Turbot manages low skill parameters
redshift:ModifyClusterDbRevisionAdmin
redshift:ModifyClusterIamRolesAdmin"Administrators can assign roles to Redshift
redshift:ModifyClusterMaintenanceOperatorOperators can modify the maintenance settings of a cluster.
redshift:ModifyClusterParameterGroupAdmin"Turbot manages low skill parameters
redshift:ModifyClusterSnapshotOperator
redshift:ModifyClusterSnapshotScheduleOperator
redshift:ModifyClusterSubnetGroupAdmin"Administrators can manage custom subnet groups
redshift:ModifyEndpointAccessAdmin
redshift:ModifyEventSubscriptionOperator"Low risk
redshift:ModifySavedQueryAdmin
redshift:ModifyScheduledActionAdmin
redshift:ModifySnapshotCopyRetentionPeriodAdmin"Can be decreased
redshift:ModifySnapshotScheduleOperator
redshift:ModifyUsageLimitAdmin
redshift:PauseClusterOperator
redshift:PurchaseReservedNodeOfferingOwnerOwners are responsible for cost commitments.
redshift:RebootClusterOperatorMedium risk. Impacts availability.
redshift:RejectDataShareOperator
redshift:ResetClusterParameterGroupAdmin"Turbot manages low skill parameters
redshift:ResizeClusterAdmin"Admin can change the size of the cluster. Cluster type
redshift:RestoreFromClusterSnapshotOperator"Low risk
redshift:RestoreTableFromClusterSnapshotOperator"Low risk
redshift:ResumeClusterOperator
redshift:RevokeClusterSecurityGroupIngressAdminOnly used for non-VPC clusters
redshift:RevokeEndpointAccessAdmin
redshift:RevokeSnapshotAccessAdminAllows cross-account snapshot sharing
redshift:RotateEncryptionKeyOperator"Medium risk. No impact on data since keys managed by Redshift
redshift:UpdatePartnerStatusAdmin
redshift:ViewQueriesFromConsoleMetadata
redshift:ViewQueriesInConsoleMetadata"No data
sns:GetEndpointAttributesMetadata"For console access
sns:GetPlatformApplicationAttributesMetadata"For console access
sns:GetSubscriptionAttributesMetadata"For console access
sns:GetTopicAttributesMetadata"For console access
sns:ListEndpointsByPlatformApplicationMetadata"For console access
sns:ListPlatformApplicationsMetadata"For console access
sns:ListSubscriptionsByTopicMetadata"For console access
sqlworkbench:AssociateConnectionWithChartAdmin
sqlworkbench:AssociateConnectionWithTabAdmin
sqlworkbench:AssociateNotebookWithTabAdmin
sqlworkbench:AssociateQueryWithTabAdmin
sqlworkbench:BatchDeleteFolderAdmin
sqlworkbench:BatchGetNotebookCellMetadata
sqlworkbench:CreateAccountAdmin
sqlworkbench:CreateChartAdmin
sqlworkbench:CreateConnectionAdmin
sqlworkbench:CreateFolderAdmin
sqlworkbench:CreateNotebookAdmin
sqlworkbench:CreateNotebookCellAdmin
sqlworkbench:CreateNotebookFromVersionAdmin
sqlworkbench:CreateNotebookVersionAdmin
sqlworkbench:CreateSavedQueryAdmin
sqlworkbench:DeleteChartAdmin
sqlworkbench:DeleteConnectionAdmin
sqlworkbench:DeleteNotebookAdmin
sqlworkbench:DeleteNotebookCellAdmin
sqlworkbench:DeleteNotebookVersionAdmin
sqlworkbench:DeleteSavedQueryAdmin
sqlworkbench:DeleteTabAdmin
sqlworkbench:DriverExecuteAdmin
sqlworkbench:DuplicateNotebookAdmin
sqlworkbench:ExportNotebookOperator
sqlworkbench:GenerateSessionAdmin
sqlworkbench:GetAccountInfoMetadata
sqlworkbench:GetAccountSettingsMetadata
sqlworkbench:GetAutocompletionMetadataMetadata
sqlworkbench:GetAutocompletionResourceMetadata
sqlworkbench:GetChartMetadata
sqlworkbench:GetConnectionMetadata
sqlworkbench:GetKMSKeyMetadata
sqlworkbench:GetNotebookMetadata
sqlworkbench:GetNotebookVersionMetadata
sqlworkbench:GetQueryExecutionHistoryMetadata
sqlworkbench:GetSavedQueryMetadata
sqlworkbench:GetSchemaInferenceMetadata
sqlworkbench:GetUserInfoMetadata
sqlworkbench:GetUserWorkspaceSettingsMetadata
sqlworkbench:ImportNotebookOperator
sqlworkbench:ListBucketsMetadata
sqlworkbench:ListConnectionsMetadata
sqlworkbench:ListDatabasesMetadata
sqlworkbench:ListFilesMetadata
sqlworkbench:ListKMSKeyAliasesMetadata
sqlworkbench:ListKMSKeysMetadata
sqlworkbench:ListNotebooksMetadata
sqlworkbench:ListNotebookVersionsMetadata
sqlworkbench:ListQueryExecutionHistoryMetadata
sqlworkbench:ListRedshiftClustersMetadata
sqlworkbench:ListSampleDatabasesMetadata
sqlworkbench:ListSavedQueryVersionsMetadata
sqlworkbench:ListTabsMetadata
sqlworkbench:ListTaggedResourcesMetadata
sqlworkbench:ListTagsForResourceMetadata
sqlworkbench:PutTabAdmin
sqlworkbench:PutUserWorkspaceSettingsAdmin
sqlworkbench:RestoreNotebookVersionOperator
sqlworkbench:TagResourceOperator
sqlworkbench:UntagResourceOperator
sqlworkbench:UpdateAccountConnectionSettingsAdmin
sqlworkbench:UpdateAccountExportSettingsAdmin
sqlworkbench:UpdateAccountGeneralSettingsAdmin
sqlworkbench:UpdateChartAdmin
sqlworkbench:UpdateConnectionAdmin
sqlworkbench:UpdateFileFolderAdmin
sqlworkbench:UpdateFolderAdmin
sqlworkbench:UpdateNotebookAdmin
sqlworkbench:UpdateNotebookCellContentAdmin
sqlworkbench:UpdateNotebookCellLayoutAdmin
sqlworkbench:UpdateSavedQueryAdmin