Unable to view Redshift Scheduled Query History (Query Editor V2)

0

Hi,

I am trying to configure a scheduled query using Redshift Query Editor V2. However, I am facing an issue where I am unable to view the schedule history as I am faced with the following permission issue.

You don't have permission to view the scheduled query history. To view, add sts:AssumeRole for IAM role arn:aws:iam::000001:role/XXXXXXX-runner to your IAM role and add your IAM user ARN to the role's trust policy.

Query Editor Error

Bit confused as to what this permission requirement means. Which IAM role should I update with the sts:AssumeRole permission?

I have attached the following policy to the IAM users via the IAM group

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": "sts:AssumeRole",
            "Resource": "arn:aws:iam::000001:role/XXXXXXX-runner"
        }
    ]
}

I followed this guide and updated the permissions as necessary -> https://docs.aws.amazon.com/redshift/latest/mgmt/query-editor-v2-schedule-query.html

Trust policy of the role used in the scheduled query (XXXXXXX-runner)

{
	"Version": "2012-10-17",
	"Statement": [
		{
			"Effect": "Allow",
			"Principal": {
				"Service": "redshift.amazonaws.com"
			},
			"Action": "sts:AssumeRole"
		},
		{
			"Effect": "Allow",
			"Principal": {
				"Service": "events.amazonaws.com"
			},
			"Action": "sts:AssumeRole"
		},
		{
			"Sid": "AssumeRole",
			"Effect": "Allow",
			"Principal": {
				"AWS": [
					"arn:aws:iam::000001:user/user1@xxxx.com",
					"arn:aws:iam::000001:user/user2@xxxx.com"
				]
			},
			"Action": "sts:AssumeRole"
		}
	]
}

Any guidance on how to troubleshoot this issue is much appreciated.

Thank You

profile picture
Bisina
질문됨 5달 전71회 조회
답변 없음

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인