IAM policy requirements for accessing clusters and namespaces registered to the Data Catalog - Amazon Redshift

IAM policy requirements for accessing clusters and namespaces registered to the Data Catalog

This topic describes the required IAM permissions for registering provisioned clusters and serverless namespaces to the Data Catalog and accessing them with Amazon Redshift.

After you register a provisioned cluster or serverless namespace to the AWS Glue Data Catalog, you need the following permissions to discover the creation of and changes to the subsequently created catalog.

  • glue:GetCatalog

  • glue:GetCatalogs

  • lakeformation:GetDataAccess

These permissions are included in the service-linked role AmazonRedshiftServiceLinkedRolePolicy. For more information on this role, see Using service-linked roles for Amazon Redshift in the Amazon Redshift Management Guide.