Skip to content

Configure Redshift Integration

Audience: System Administrators

Content Summary: This page provides a tutorial for enabling the native Redshift integration in Immuta. For an overview of the integration, see the Redshift Overview documentation.

Prerequisites:

  • A Redshift cluster with an RA3 node. You must use a Redshift RA3 instance type because Immuta requires cross-database views, which are only supported in Redshift RA3 instance types.
  • For automated installations, the credentials provided must be a Superuser or have the ability to create databases and users and modify grants.

Add the Integration

  1. Click the App Settings icon in the left sidebar.
  2. Click Native Integrations in the left panel.
  3. Click the +Add Native Integration button and select Redshift from the dropdown menu.
  4. Complete the Host, Port, Initial Database, and Immuta Database fields.

    Redshift Config Modal

  5. Opt to check the Enable Impersonation box and customize the Impersonation Role name as needed. This will allow users to natively impersonate another user.

  6. Set up the connection Automatically or Manually.

    Select Automatic and enter your Username and Password.

    Note: When performing an automated installation, the credentials provided must be a Superuser or have the ability to create databases and users and modify grants.

    1. Select Manual and download both of the bootstrap scripts.
    2. Run the Bootstrap Master Script in the Redshift Initial Database from step 4.
    3. Run the second Bootstrap Script in the new Immuta Database in Redshift.
    4. Choose your authentication method, and enter the information of the newly created account.
  7. Click Test Redshift Connection.

  8. Once the credentials are successfully tested, click Save.

  9. Click Confirm.

Edit a Redshift Integration

  1. Click the App Settings icon in the left sidebar.
  2. Navigate to the Native Integrations section and click the down arrow next to the Redshift Integration.
  3. Edit the field you want to change. Note any field shadowed is not editable, and the integration must be disabled and re-installed to change it.
  4. Enter Username and Password.

    Immuta requires temporary, one-time use of credentials with specific permissions.

    When performing edits to an integration, Immuta requires temporary, one-time use of credentials of a Superuser or a user with the following permissions:

    • Create Databases
    • Create users
    • Modify grants

    Alternatively, you can download the Edit Script and run it in Redshift.

  5. Click Validate Credentials.

  6. Click Save.
  7. Click Confirm.

Remove a Redshift Integration

  1. Click the App Settings icon in the left sidebar.
  2. Navigate to the Native Integrations section and click the down arrow next to the Redshift Integration.
  3. Click the checkbox to disable the integration.
  4. Enter the username and password that were used to initially configure the integration and click Validate Credentials.
  5. Click Save.
  6. Click Confirm.