Amazon Redshift API permissions reference
When you set up Access control, you write permission policies that you can attach to an IAM identity (identity-based policies). For detailed reference information, see the following topics in the Service Authorization Reference:
Actions, resources, and condition keys for Amazon Redshift that use the
redshift:prefix.Actions, resources, and condition keys for Amazon Redshift Serverless that use the
redshift-serverless:prefix.Actions, resources, and condition keys for Amazon Redshift Data API that use the
redshift-data:prefix.Actions, resources, and condition keys for Amazon SQL Workbench (Amazon Redshift query editor v2) that use the
sqlworkbench:prefix.The query editor v2 includes permission-only actions that don't directly correspond to an API operation. These actions are indicated in the Service Authorization Reference with
[permission only].
The Service Authorization Reference contains information about which API operations can be used in an IAM policy. It also includes the Amazon resource for which you can grant the permissions, and condition keys that you can include for fine-grained access control. For more information about conditions, see Using IAM policy conditions for fine-grained access control.
You specify the actions in the
policy's Action field, the resource value in the policy's Resource
field, and conditions in the policy's Condition field.
To specify an action for Amazon Redshift, use the redshift: prefix followed by the API
operation name (for example, redshift:CreateCluster).