Unable to view Redshift Scheduled Query History (Query Editor V2)

0

Hi,

I am trying to configure a scheduled query using Redshift Query Editor V2. However, I am facing an issue where I am unable to view the schedule history as I am faced with the following permission issue.

You don't have permission to view the scheduled query history. To view, add sts:AssumeRole for IAM role arn:aws:iam::000001:role/XXXXXXX-runner to your IAM role and add your IAM user ARN to the role's trust policy.

Query Editor Error

Bit confused as to what this permission requirement means. Which IAM role should I update with the sts:AssumeRole permission?

I have attached the following policy to the IAM users via the IAM group

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": "sts:AssumeRole",
            "Resource": "arn:aws:iam::000001:role/XXXXXXX-runner"
        }
    ]
}

I followed this guide and updated the permissions as necessary -> https://docs.aws.amazon.com/redshift/latest/mgmt/query-editor-v2-schedule-query.html

Trust policy of the role used in the scheduled query (XXXXXXX-runner)

{
	"Version": "2012-10-17",
	"Statement": [
		{
			"Effect": "Allow",
			"Principal": {
				"Service": "redshift.amazonaws.com"
			},
			"Action": "sts:AssumeRole"
		},
		{
			"Effect": "Allow",
			"Principal": {
				"Service": "events.amazonaws.com"
			},
			"Action": "sts:AssumeRole"
		},
		{
			"Sid": "AssumeRole",
			"Effect": "Allow",
			"Principal": {
				"AWS": [
					"arn:aws:iam::000001:user/user1@xxxx.com",
					"arn:aws:iam::000001:user/user2@xxxx.com"
				]
			},
			"Action": "sts:AssumeRole"
		}
	]
}

Any guidance on how to troubleshoot this issue is much appreciated.

Thank You

profile picture
Bisina
質問済み 5ヶ月前71ビュー
回答なし

ログインしていません。 ログイン 回答を投稿する。

優れた回答とは、質問に明確に答え、建設的なフィードバックを提供し、質問者の専門分野におけるスキルの向上を促すものです。

質問に答えるためのガイドライン

関連するコンテンツ