Redshift
Prefix redshift, 167 actions · Domain Analytics
10 AWS managed policies. 5 have reviewed guidance; the rest have authoritative permission data pending editorial review.
User access (4)
- AmazonRedshiftFullAccessAdmin
- AmazonRedshiftReadOnlyAccessReader
- DatabaseAdministratorHigh privilegeAdmin
- DataScientistHigh privilegeAdmin
Operator and limited (2)
- AmazonRedshiftDataFullAccessOperator
- AmazonRedshiftQueryEditorOperator
Service roles (4)
Also grants Redshift actions (62)
- AdministratorAccess
- AIDevOpsAgentAccessPolicy
- AIDevOpsAgentActionsPolicy
- AIOpsAssistantPolicy
- AmazonDataZoneEnvironmentRolePermissionsBoundary
- AmazonDataZoneFullAccess
- AmazonDataZonePreviewConsoleFullAccess
- AmazonDataZoneProjectRolePermissionsBoundary
- AmazonDataZoneRedshiftGlueProvisioningPolicy
- AmazonDataZoneSageMakerEnvironmentRolePermissionsBoundary
- AmazonEC2RoleforDataPipelineRole
- AmazonRedshiftQueryEditorV2FullAccess
- AmazonRedshiftQueryEditorV2NoSharing
- AmazonRedshiftQueryEditorV2ReadSharing
- AmazonRedshiftQueryEditorV2ReadWriteSharing
- AmazonSageMakerCanvasDataPrepFullAccess
- AmazonSageMakerCanvasFullAccess
- AmazonSageMakerFullAccess
- AssuranceServiceRolePolicy
- AWS_ConfigRole
- AWSAuditManagerServiceRolePolicy
- AWSBackupFullAccess
- AWSBackupOperatorAccess
- AWSBackupServiceLinkedRolePolicyForBackup
- AWSBackupServiceRolePolicyForBackup
- AWSBackupServiceRolePolicyForRestores
- AWSCODAPermissionsBoundary
- AWSConfigServiceRolePolicy
- AWSDataExchangeFullAccess
- AWSDataExchangeProviderFullAccess
- AWSDataPipeline_FullAccess
- AWSDataPipeline_PowerUser
- AWSFinOpsAgentServiceRolePolicy
- AWSGlueConsoleFullAccess
- AWSGlueConsoleSageMakerNotebookFullAccess
- AwsGlueDataBrewFullAccessPolicy
- AWSMcpServiceActionsFullAccess
- AWSPartnerLedSupportReadOnlyAccess
- AWSResilienceHubV2AssessmentExecutionPolicy
- AWSResourceExplorerServiceRolePolicy
- AWSResourceGroupsReadOnlyAccess
- AWSServiceRolePolicyForBackupRestoreTesting
- AWSSupportServiceRolePolicy
- AWSTrustedAdvisorServiceRolePolicy
- AWSWellArchitectedAgentResourceScanningServiceRolePolicy
- CloudWatchOmniAWSIntegrationPolicy
- PowerUserAccess
- ReadOnlyAccess
- ResourceGroupsTaggingAPITagUntagSupportedResources
- SageMakerStudioAdminIAMDefaultExecutionPolicy
- SageMakerStudioAdminIAMPermissiveExecutionPolicy
- SageMakerStudioFullAccess
- SageMakerStudioProjectProvisioningRolePolicy
- SageMakerStudioProjectUserRolePermissionsBoundary
- SageMakerStudioProjectUserRolePolicy
- SageMakerStudioUserIAMDefaultExecutionPolicy
- SageMakerStudioUserIAMPermissiveExecutionPolicy
- SecretsManagerReadWrite
- SecurityAudit
- SupportUser
- ViewOnlyAccess
- WellArchitectedAgentResourceScanning
acceptreservednodeexchange addpartner associatedatashareconsumer authorizeclustersecuritygroupingress authorizedatashare authorizeendpointaccess authorizeinboundintegration authorizesnapshotaccess batchdeleteclustersnapshots batchmodifyclustersnapshots cancelquery cancelquerysession cancelresize copyclustersnapshot createauthenticationprofile createcluster createclusterparametergroup createclustersecuritygroup createclustersnapshot createclustersubnetgroup createclusteruser createcustomdomainassociation createendpointaccess createeventsubscription createhsmclientcertificate createhsmconfiguration createinboundintegration createintegration createqev2idcapplication createredshiftidcapplication createsavedquery createscheduledaction createsnapshotcopygrant createsnapshotschedule createtags createusagelimit deauthorizedatashare deleteauthenticationprofile deletecluster deleteclusterparametergroup deleteclustersecuritygroup deleteclustersnapshot deleteclustersubnetgroup deletecustomdomainassociation deleteendpointaccess deleteeventsubscription deletehsmclientcertificate deletehsmconfiguration deleteintegration deletepartner deleteqev2idcapplication deleteredshiftidcapplication deleteresourcepolicy deletesavedqueries deletescheduledaction deletesnapshotcopygrant deletesnapshotschedule deletetags deleteusagelimit deregisternamespace describeaccountattributes describeauthenticationprofiles describeautonomicsdenylist describeclusterdbrevisions describeclusterparametergroups describeclusterparameters describeclustersecuritygroups describeclustersnapshots describeclustersubnetgroups describeclustertracks describeclusterversions describeclusters describecustomdomainassociations describedatashares describedatasharesforconsumer describedatasharesforproducer describedefaultclusterparameters describeendpointaccess describeendpointauthorization describeeventcategories describeeventsubscriptions describeevents describehsmclientcertificates describehsmconfigurations describeinboundintegrations describeintegrations describeloggingstatus describenodeconfigurationoptions describeorderableclusteroptions describepartners describeqev2idcapplications describequery describeredshiftidcapplications describereservednodeexchangestatus describereservednodeofferings describereservednodes describeresize describesavedqueries describescheduledactions describesnapshotcopygrants describesnapshotschedules describestorage describetable describetablerestorestatus describetags describeusagelimits disablelogging disablesnapshotcopy disassociatedatashareconsumer enablelogging enablesnapshotcopy executequery failoverprimarycompute fetchresults getclustercredentials getclustercredentialswithiam getidentitycenterauthtoken getreservednodeexchangeconfigurationoptions getreservednodeexchangeofferings getresourcepolicy joingroup listdatabases listrecommendations listsavedqueries listschemas listtables modifyaquaconfiguration modifyauthenticationprofile modifyautonomicsdenylist modifycluster modifyclusterdbrevision modifyclusteriamroles modifyclustermaintenance modifyclusterparametergroup modifyclustersnapshot modifyclustersnapshotschedule modifyclustersubnetgroup modifycustomdomainassociation modifyendpointaccess modifyeventsubscription modifyintegration modifylakehouseconfiguration modifyqev2idcapplication modifyredshiftidcapplication modifysavedquery modifyscheduledaction modifysnapshotcopyretentionperiod modifysnapshotschedule modifyusagelimit pausecluster purchasereservednodeoffering putresourcepolicy rebootcluster registernamespace rejectdatashare resetclusterparametergroup resizecluster restorefromclustersnapshot restoretablefromclustersnapshot resumecluster revokeclustersecuritygroupingress revokeendpointaccess revokesnapshotaccess rotateencryptionkey updatepartnerstatus viewqueriesfromconsole viewqueriesinconsole
Actions (167)
| Action | Access level | Policies granting without limits | Policies granting with resource or condition limits |
|---|---|---|---|
| redshift:AcceptReservedNodeExchange | Write | 9 | 1 |
| redshift:AddPartner | Write | 9 | 1 |
| redshift:AssociateDataShareConsumer | Write | 10 | 3 |
| redshift:AuthorizeClusterSecurityGroupIngress | Write | 10 | 1 |
| redshift:AuthorizeDataShare | Permissions management | 10 | 5 |
| redshift:AuthorizeEndpointAccess | Permissions management | 9 | 1 |
| redshift:AuthorizeInboundIntegration | Write | 9 | 1 |
| redshift:AuthorizeSnapshotAccess | Permissions management | 9 | 1 |
| redshift:BatchDeleteClusterSnapshots | Write | 9 | 1 |
| redshift:BatchModifyClusterSnapshots | Write | 9 | 1 |
| redshift:CancelQuery | Write | 10 | 1 |
| redshift:CancelQuerySession | Write | 9 | 1 |
| redshift:CancelResize | Write | 9 | 1 |
| redshift:CopyClusterSnapshot | Write | 9 | 1 |
| redshift:CreateAuthenticationProfile | Write | 9 | 1 |
| redshift:CreateCluster | Write | 9 | 1 |
| redshift:CreateClusterParameterGroup | Write | 9 | 1 |
| redshift:CreateClusterSecurityGroup | Write | 10 | 1 |
| redshift:CreateClusterSnapshot | Write | 9 | 2 |
| redshift:CreateClusterSubnetGroup | Write | 9 | 1 |
| redshift:CreateClusterUser | Permissions management | 11 | 2 |
| redshift:CreateCustomDomainAssociation | Write | 9 | 1 |
| redshift:CreateEndpointAccess | Write | 9 | 1 |
| redshift:CreateEventSubscription | Write | 9 | 1 |
| redshift:CreateHsmClientCertificate | Write | 9 | 1 |
| redshift:CreateHsmConfiguration | Write | 9 | 1 |
| redshift:CreateInboundIntegration | Write | 9 | 1 |
| redshift:CreateIntegration | Write | 9 | 1 |
| redshift:CreateQev2IdcApplication | Write | 9 | 1 |
| redshift:CreateRedshiftIdcApplication | Write | 9 | 1 |
| redshift:CreateSavedQuery | Write | 10 | 1 |
| redshift:CreateScheduledAction | Write | 9 | 1 |
| redshift:CreateSnapshotCopyGrant | Permissions management | 9 | 1 |
| redshift:CreateSnapshotSchedule | Write | 9 | 1 |
| redshift:CreateTags | Tagging | 10 | 2 |
| redshift:CreateUsageLimit | Write | 9 | 1 |
| redshift:DeauthorizeDataShare | Permissions management | 9 | 1 |
| redshift:DeleteAuthenticationProfile | Write | 9 | 1 |
| redshift:DeleteCluster | Write | 9 | 2 |
| redshift:DeleteClusterParameterGroup | Write | 9 | 1 |
| redshift:DeleteClusterSecurityGroup | Write | 9 | 1 |
| redshift:DeleteClusterSnapshot | Write | 9 | 3 |
| redshift:DeleteClusterSubnetGroup | Write | 9 | 1 |
| redshift:DeleteCustomDomainAssociation | Write | 9 | 1 |
| redshift:DeleteEndpointAccess | Write | 9 | 1 |
| redshift:DeleteEventSubscription | Write | 9 | 1 |
| redshift:DeleteHsmClientCertificate | Write | 9 | 1 |
| redshift:DeleteHsmConfiguration | Write | 9 | 1 |
| redshift:DeleteIntegration | Write | 9 | 1 |
| redshift:DeletePartner | Write | 9 | 1 |
| redshift:DeleteQev2IdcApplication | Write | 9 | 1 |
| redshift:DeleteRedshiftIdcApplication | Write | 9 | 1 |
| redshift:DeleteResourcePolicy | Permissions management | 9 | 1 |
| redshift:DeleteSavedQueries | Write | 10 | 1 |
| redshift:DeleteScheduledAction | Write | 9 | 1 |
| redshift:DeleteSnapshotCopyGrant | Write | 9 | 1 |
| redshift:DeleteSnapshotSchedule | Write | 9 | 1 |
| redshift:DeleteTags | Tagging | 10 | 1 |
| redshift:DeleteUsageLimit | Write | 9 | 1 |
| redshift:DeregisterNamespace | Write | 9 | 1 |
| redshift:DescribeAccountAttributes | Read | 20 | 1 |
| redshift:DescribeAuthenticationProfiles | Read | 20 | 1 |
| redshift:DescribeAutonomicsDenylist | Read | 20 | 1 |
| redshift:DescribeClusterDbRevisions | List | 25 | 3 |
| redshift:DescribeClusterParameterGroups | Read | 28 | 3 |
| redshift:DescribeClusterParameters | Read | 26 | 3 |
| redshift:DescribeClusterSecurityGroups | Read | 29 | 1 |
| redshift:DescribeClusterSnapshots | Read | 27 | 5 |
| redshift:DescribeClusterSubnetGroups | Read | 29 | 5 |
| redshift:DescribeClusterTracks | List | 23 | 1 |
| redshift:DescribeClusterVersions | Read | 22 | 1 |
| redshift:DescribeClusters | List | 55 | 9 |
| redshift:DescribeCustomDomainAssociations | List | 21 | 1 |
| redshift:DescribeDataShares | Read | 30 | 2 |
| redshift:DescribeDataSharesForConsumer | Read | 23 | 1 |
| redshift:DescribeDataSharesForProducer | Read | 24 | 1 |
| redshift:DescribeDefaultClusterParameters | Read | 22 | 1 |
| redshift:DescribeEndpointAccess | Read | 25 | 3 |
| redshift:DescribeEndpointAuthorization | List | 25 | 3 |
| redshift:DescribeEventCategories | Read | 22 | 1 |
| redshift:DescribeEventSubscriptions | Read | 26 | 3 |
| redshift:DescribeEvents | List | 23 | 1 |
| redshift:DescribeHsmClientCertificates | Read | 23 | 1 |
| redshift:DescribeHsmConfigurations | Read | 22 | 1 |
| redshift:DescribeInboundIntegrations | List | 21 | 1 |
| redshift:DescribeIntegrations | List | 24 | 3 |
| redshift:DescribeLoggingStatus | Read | 27 | 3 |
| redshift:DescribeNodeConfigurationOptions | List | 23 | 1 |
| redshift:DescribeOrderableClusterOptions | Read | 24 | 1 |
| redshift:DescribePartners | Read | 20 | 1 |
| redshift:DescribeQev2IdcApplications | List | 20 | 1 |
| redshift:DescribeQuery | Read | 21 | 1 |
| redshift:DescribeRedshiftIdcApplications | List | 21 | 1 |
| redshift:DescribeReservedNodeExchangeStatus | Read | 20 | 1 |
| redshift:DescribeReservedNodeOfferings | Read | 23 | 1 |
| redshift:DescribeReservedNodes | Read | 24 | 1 |
| redshift:DescribeResize | Read | 22 | 1 |
| redshift:DescribeSavedQueries | Read | 21 | 1 |
| redshift:DescribeScheduledActions | Read | 24 | 3 |
| redshift:DescribeSnapshotCopyGrants | Read | 25 | 1 |
| redshift:DescribeSnapshotSchedules | Read | 22 | 3 |
| redshift:DescribeStorage | Read | 22 | 1 |
| redshift:DescribeTable | Read | 21 | 1 |
| redshift:DescribeTableRestoreStatus | Read | 23 | 1 |
| redshift:DescribeTags | Read | 28 | 7 |
| redshift:DescribeUsageLimits | Read | 22 | 1 |
| redshift:DisableLogging | Write | 9 | 1 |
| redshift:DisableSnapshotCopy | Write | 9 | 1 |
| redshift:DisassociateDataShareConsumer | Write | 9 | 1 |
| redshift:EnableLogging | Write | 9 | 1 |
| redshift:EnableSnapshotCopy | Write | 9 | 1 |
| redshift:ExecuteQuery | Write | 10 | 1 |
| redshift:FailoverPrimaryCompute | Write | 9 | 1 |
| redshift:FetchResults | Read | 10 | 1 |
| redshift:GetClusterCredentials | Write | 12 | 9 |
| redshift:GetClusterCredentialsWithIAM | Write | 12 | 5 |
| redshift:GetIdentityCenterAuthToken | Read | 9 | 1 |
| redshift:GetReservedNodeExchangeConfigurationOptions | Read | 9 | 1 |
| redshift:GetReservedNodeExchangeOfferings | Read | 10 | 1 |
| redshift:GetResourcePolicy | Read | 14 | 3 |
| redshift:JoinGroup | Permissions management | 11 | 1 |
| redshift:ListDatabases | List | 11 | 1 |
| redshift:ListRecommendations | List | 12 | 1 |
| redshift:ListSavedQueries | List | 10 | 1 |
| redshift:ListSchemas | List | 11 | 1 |
| redshift:ListTables | List | 11 | 1 |
| redshift:ModifyAquaConfiguration | Write | 9 | 1 |
| redshift:ModifyAuthenticationProfile | Write | 9 | 1 |
| redshift:ModifyAutonomicsDenylist | Write | 9 | 1 |
| redshift:ModifyCluster | Write | 10 | 1 |
| redshift:ModifyClusterDbRevision | Write | 9 | 1 |
| redshift:ModifyClusterIamRoles | Permissions management | 9 | 1 |
| redshift:ModifyClusterMaintenance | Write | 9 | 1 |
| redshift:ModifyClusterParameterGroup | Write | 9 | 1 |
| redshift:ModifyClusterSnapshot | Write | 9 | 1 |
| redshift:ModifyClusterSnapshotSchedule | Write | 9 | 1 |
| redshift:ModifyClusterSubnetGroup | Write | 9 | 1 |
| redshift:ModifyCustomDomainAssociation | Write | 9 | 1 |
| redshift:ModifyEndpointAccess | Write | 9 | 1 |
| redshift:ModifyEventSubscription | Write | 9 | 1 |
| redshift:ModifyIntegration | Write | 9 | 1 |
| redshift:ModifyLakehouseConfiguration | Write | 9 | 1 |
| redshift:ModifyQev2IdcApplication | Write | 9 | 1 |
| redshift:ModifyRedshiftIdcApplication | Write | 9 | 1 |
| redshift:ModifySavedQuery | Write | 10 | 1 |
| redshift:ModifyScheduledAction | Write | 9 | 1 |
| redshift:ModifySnapshotCopyRetentionPeriod | Write | 9 | 1 |
| redshift:ModifySnapshotSchedule | Write | 9 | 1 |
| redshift:ModifyUsageLimit | Write | 9 | 1 |
| redshift:PauseCluster | Write | 9 | 1 |
| redshift:PurchaseReservedNodeOffering | Write | 9 | 1 |
| redshift:PutResourcePolicy | Permissions management | 9 | 1 |
| redshift:RebootCluster | Write | 9 | 1 |
| redshift:RegisterNamespace | Write | 9 | 1 |
| redshift:RejectDataShare | Permissions management | 9 | 1 |
| redshift:ResetClusterParameterGroup | Write | 9 | 1 |
| redshift:ResizeCluster | Write | 9 | 1 |
| redshift:RestoreFromClusterSnapshot | Write | 9 | 2 |
| redshift:RestoreTableFromClusterSnapshot | Write | 9 | 2 |
| redshift:ResumeCluster | Write | 9 | 1 |
| redshift:RevokeClusterSecurityGroupIngress | Write | 10 | 1 |
| redshift:RevokeEndpointAccess | Permissions management | 9 | 1 |
| redshift:RevokeSnapshotAccess | Permissions management | 9 | 1 |
| redshift:RotateEncryptionKey | Write | 9 | 1 |
| redshift:UpdatePartnerStatus | Write | 9 | 1 |
| redshift:ViewQueriesFromConsole | List | 11 | 1 |
| redshift:ViewQueriesInConsole | List | 12 | 1 |