How to connect with SSL to Amazon Redshift Serverless

0

I would like to allow only SSL connections and disable non-SSL. Is it possible to do such configuration to Redshift Serverless?

[What I have researched so far]

I found in this document:

https://docs.aws.amazon.com/redshift/latest/mgmt/serverless-connecting.html

"Amazon Redshift supports Secure Sockets Layer (SSL) connections to encrypt queries and data. To set up a secure connection, you can use the same configuration you use to set up a connection to a provisioned Redshift cluster. Follow the steps in Configuring security options for connections"

When I access to:

https://docs.aws.amazon.com/redshift/latest/mgmt/connecting-ssl-support.html

I found this:

"By default, cluster databases accept a connection whether it uses SSL or not. To configure your cluster to require an SSL connection, set the require_SSL parameter to true in the parameter group that is associated with the cluster."

I think that I have to create a parameter group:

https://docs.aws.amazon.com/redshift/latest/mgmt/managing-parameter-groups-console.html

However:

"When you launch a cluster, you must associate it with a parameter group. If you want to change the parameter group later, you can modify the cluster and choose a different parameter group."

There is no option for Redshift Serverless!

And in this docs:

https://docs.aws.amazon.com/redshift/latest/mgmt/serverless-console-comparison.html

"Parameter groups - Provisioned clusters support parameter groups. Amazon Redshift Serverless does not have the concept of a parameter group. For more information about parameter groups for a provisioned cluster, see Amazon Redshift parameter groups."

=> I would like to allow only SSL connections and disable non-SSL. Is it possible to do such configuration to Redshift Serverless? If possible, I would appreciate it if you could tell me how to set it up.

질문됨 2년 전1801회 조회
1개 답변
0

Your understanding is corrrect. As there is no concept of parameter groups in serverless, you do not have an option to toggle "require_ssl" to true. By default, cluster databases accept a connection whether it uses SSL or not. Therefore in case of serverless endpoints, you can still set up an SSL connection from the client to the cluster endpoint but there is no way to enforce it on the cluster side. For more information and options for configuring the security options for connections please see
[+] https://docs.aws.amazon.com/redshift/latest/mgmt/connecting-ssl-support.html#connect-using-ssl

AWS
지원 엔지니어
답변함 2년 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠