Skip to content

You are viewing documentation for Immuta version 2023.2.

For the latest version, view our documentation for Immuta SaaS or the latest self-hosted version.

Redshift Spectrum

Allow Immuta to create secure views of your external tables through one of these methods:

For an overview of the integration, see the Redshift overview documentation.

Requirements

Use an existing database

  1. Click the App Settings icon in the left sidebar.
  2. Click Native Integrations in the left panel.
  3. Click the +Add Native Integration button and select Redshift from the dropdown menu.
  4. Complete the Host and Port fields.
  5. Enter the name of the database you created the external schema in as the Immuta Database. This database will store all secure schemas and Immuta-created views.
  6. Opt to check the Enable Impersonation box and customize the Impersonation Role name as needed. This will allow users to natively impersonate another user.

  7. Select Manual and download both of the bootstrap scripts. The specified role used to run the bootstrap needs to have the following privileges:

    • ALL PRIVILEGES ON DATABASE for the database you configure the integration with, as you must manage grants on that database.
    • CREATE USER
    • GRANT TEMP ON DATABASE
  8. Run the bootstrap script (Immuta database) in the Redshift database that contains the external schema.

  9. Choose your authentication method, and enter the credentials from the bootstrap script for the Immuta_System_Account.

  10. Click Test Redshift Connection.

  11. Once the credentials are successfully tested, click Save and Confirm.

Create a new Immuta database

  1. Click the App Settings icon in the left sidebar.
  2. Click Native Integrations in the left panel.
  3. Click the +Add Native Integration button and select Redshift from the dropdown menu.
  4. Complete the Host and Port fields.
  5. Enter an Immuta Database. This is a new database where all secure schemas and Immuta created views will be stored.
  6. Opt to check the Enable Impersonation box and customize the Impersonation Role name as needed. This will allow users to natively impersonate another user.
  7. Select Manual and download both of the bootstrap scripts. The specified role used to run the bootstrap needs to have the following privileges:

    • ALL PRIVILEGES ON DATABASE for the database you configure the integration with, as you must manage grants on that database.
    • CREATE DATABASE
    • CREATE USER
    • GRANT TEMP ON DATABASE
  8. Run the bootstrap script (initial database) in the Redshift initial database.

  9. Run the bootstrap script (Immuta database) in the new Immuta Database in Redshift.
  10. Choose your authentication method, and enter the credentials from the bootstrap script for the Immuta_System_Account.
  11. Click Test Redshift Connection.
  12. Once the credentials are successfully tested, click Save and Confirm.

Then, add your external tables to the Immuta database.