-
Book Overview & Buying
-
Table Of Contents
Amazon Redshift Cookbook
By :
It is best practice to design security by giving users the minimum privileges they need to do their work. Amazon Redshift applies this principle through RBAC (https://docs.aws.amazon.com/redshift/latest/dg/t_Roles.html), which grants privileges based on a user’s specific role. Privileges are assigned at the role level, without needing to grant permissions individually for each user. Redshift provides four system-defined roles (https://docs.aws.amazon.com/redshift/latest/dg/r_roles-default.html) to start with, and you can create additional, more specific roles with targeted privileges. RBAC allows you to limit access to certain commands and assign roles to authorized users, as well as set object-level and system-level privileges for those roles. Roles can be nested using role hierarchy. RBAC enables you to apply fine-grained access control such as column-level security, row-level security, and dynamic data masking.
To complete this recipe...