Enhanced VPC routing - Amazon Redshift
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Enhanced VPC routing

You can turn on enhanced VPC routing when you create or modify a cluster, and when you create or modify a Amazon Redshift Serverless workgroup.

To work with enhanced VPC routing for a cluster, your cluster must meet the following requirements and constraints:

  • Your cluster must be in a VPC.

    If you attach an Amazon S3 VPC endpoint, your cluster uses the VPC endpoint only for access to Amazon S3 buckets in the same Amazon Region. To access buckets in another Amazon Region (not using the VPC endpoint) or to access other Amazon services, make your cluster publicly accessible or use a network address translation (NAT) gateway. For more information, see Creating a cluster in a VPC.

  • You must enable Domain Name Service (DNS) resolution in your VPC. Alternatively, if you're using your own DNS server, make sure that DNS requests to Amazon S3 are resolved correctly to the IP addresses that are maintained by Amazon. For more information, see Using DNS with Your VPC in the Amazon VPC User Guide.

  • DNS hostnames must be enabled in your VPC. DNS hostnames are enabled by default.

  • Your VPC endpoint policies must allow access to any Amazon S3 buckets used with COPY, UNLOAD, or CREATE LIBRARY calls in Amazon Redshift, including access to any manifest files involved. For COPY from remote hosts, your endpoint policies must allow access to each host machine. For more information, see IAM Permissions for COPY, UNLOAD, and CREATE LIBRARY in the Amazon Redshift Database Developer Guide.

To create a cluster with enhanced VPC routing

  1. Sign in to the Amazon Web Services Management Console and open the Amazon Redshift console at https://console.amazonaws.cn/redshiftv2/.

  2. On the navigation menu, choose Provisioned clusters dashboard, then choose Create cluster and enter the Cluster details properties.

  3. To display the Additional configurations section, choose to switch off Use defaults.

  4. Navigate to the Network and security section.

  5. To turn on Enhanced VPC routing, choose Turn on to force cluster traffic through the VPC.

  6. Choose Create cluster to create the cluster. The cluster might take several minutes to be ready to use.

To create an Amazon Redshift Serverless workgroup with enhanced VPC routing

  1. Sign in to the Amazon Web Services Management Console and open the Amazon Redshift console at https://console.amazonaws.cn/redshiftv2/.

  2. On the navigation menu, choose Serverless dashboard, then choose Create workgroup and enter the properties for your workgroup.

  3. Navigate to the Network and security section.

  4. Select Turn on enhanced VPC routing to route network traffic through the VPC.

  5. Choose Next and finish entering your workgroup properties until you Create the workgroup.