AWS Redshift (IAM)

AWSredshiftanalytics

A fully managed, petabyte-scale data warehouse service in the cloud that allows you to analyze large datasets using SQL.

iamaws

docs ↗

Permissions

Actions in this service

redshift:DescribeClusters

redshift:DescribeEvents

redshift:DescribeTags

redshift:ListDatabases

redshift:ListSchemas

redshift:ListTables

redshift:DescribeTable

Policy

Minimal privilege example

Copy-paste least-privilege policy statement — not yet harness-verified.

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "redshift:DescribeClusters", "redshift:DescribeEvents", "redshift:DescribeTags", "redshift:ListDatabases", "redshift:ListSchemas", "redshift:ListTables", "redshift:DescribeTable" ], "Resource": "*" } ] }

SDK mapping

Method → permission

SDK method mapping (e.g. boto3.get_object() → s3:GetObject) is not yet collected.

Footguns

Known gotchas

Avoid redshift:* — grants full control including creating, modifying, and deleting clusters and data.

Avoid redshift:DeleteCluster — allows deletion of clusters, causing permanent data loss.

Resources

docshttps://servicereference.us-east-1.amazonaws.com/v1/redshift/redshift.json ↗