Skip to main content
The Atoti DirectQuery Redshift connector uses the Redshift JDBC driver to connect to a database.

​
User and role

Connecting DirectQuery to Redshift first requires a user linked to a role with sufficient privileges. The following actions require a Redshift ‘power user’ account.

​
How to create a role

The AWS role creation reference describes how to create a role.

​
How to grant required privileges to this role

DirectQuery required privileges are:
  • USAGE privilege on target schema
  • SELECT privilege on schema queryable objects (tables, views)
The AWS privilege granting reference describes how to grant these to the new role.

​
How to create a user linked to this role

The last step is to create a user with the following attributes:
  • login
  • password
The AWS user management documentation covers this step. Then assign the role to the user with a GRANT ROLE command.

​
Basic authentication connection

Connection is done through DirectQuery Redshift connector passing the following minimal properties:

​
Authentication connection with AWS IAM credentials

After configuring AWS, the credentials are usually stored into the file ~/.aws/credentials. If the location is different, it can be set with the AWS_CREDENTIAL_PROFILES_FILE environment variable. The AWS user needs the AWS permissions redshift:DescribeClusters and redshift:GetClusterCredentials. Then only the connection string has to be provided, starting with jdbc:redshift:iam://. For more details, check the AWS documentation.