![]() The AWS Region where your data is located. With these methods, you can also supply a region value that specifies When connecting to a cluster as a database user, specify the cluster identifier, the database name, and the database user name.Īlso, permission to call the redshift:GetClusterCredentials operation is required. When connecting to a cluster as an IAM identity, specify the cluster identifier and the database name.Īlso, permission to call the redshift:GetClusterCredentialsWithIAM operation is required. For example, arn:iam::123456789012:user:foo has the database user name IAM:foo.Īlso, permission to call the redshift-serverless:GetCredentials operation is required. The database user name is derived from the IAM identity. When connecting to a serverless workgroup, specify the workgroup name and database name. The maximum retention time for a client token used in ExecuteStatement or BatchExecuteStatement API operation is 8 hours.ĭatabase authentication credentials when calling the Amazon Redshift Data API If any SQL statement fails, then because they are run as one transaction, all work is rolled back. Subsequent SQL statements don't start until the previous statement in the array completes. ![]() They run serially in the order of the array. The SQL statements in the Sqls parameter of BatchExecuteStatement API operation are run as a single transaction. To act on the same SQL statement from another user, the user must be able to assume the IAM roleįor more information about how to assume a role, see Authorizing access to the Amazon Redshift Data API. The cluster must be in a virtual private cloud (VPC) based on the Amazon VPC service.īy default, users with the same IAM role or IAM permissions as the runner of anĮxecuteStatement or BatchExecuteStatement API operationĬancelStatement, DescribeStatement, GetStatementResult, and ListStatements For examples of calling from the AWS CLI, see Calling the Data API.Ĭonsiderations when calling the Amazon Redshift Data APIĬonsider the following when calling the Data API: Information, see Considerations when calling the Amazon Redshift Data API.Ĭall the Data API from the AWS Command Line Interface (AWS CLI), from your own code, or using the queryĮditor in the Amazon Redshift console. Review the considerations and limitations when calling the Data API. Storing database credentials in AWS Secrets Manager. Set up a secret if you use Secrets Manager for authentication credentials. For more information, see Choosingĭatabase authentication credentials when calling the Amazon Redshift Data API. For more informationĪbout authorization, see Authorizing access to the Amazon Redshift Data API.ĭetermine if you plan to call the Data API with authentication credentials from Secrets Manager or Working with the Amazon Redshift Data APIīefore you use the Amazon Redshift Data API, review the following steps:ĭetermine if you, as the caller of the Data API, are authorized. You don't need to pass passwords in the API calls with eitherįor more information about AWS Secrets Manager, see What Is AWS Secrets Manager? inįor more information about the Data API operations, see theĪPI Reference. The Data API uses either credentials stored in AWS Secrets Manager or temporary databaseĬredentials. You can use theĮndpoint to run SQL statements without managing connections. ![]() It provides a secure HTTP endpoint and integration with AWS SDKs. The Data API doesn't require a persistent connection to your database. Including AWS Lambda, Amazon SageMaker notebooks, and AWS Cloud9. This API, you can access Amazon Redshift data with web services–based applications, You can access your Amazon Redshift database using the built-in Amazon Redshift Data API.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |