Is it possible to have a Redshift Spectrum schema access multiple accounts data ?

Question

CREATE EXTERNAL SCHEMA on redshift requires an IAM_ROLE or equivalent. I'm wondering if its possible to create this in such a way as to give redshift spectrum the ability to read data across **multiple** accounts ? Getting access to local S3 data is easy enough, getting access to one 'external' accounts S3 data is easy enough - its combining the two (or more) thats proving hard. Its beyond my capabilities with IAM.

Answer

The Dev Guide has a section on [IAM Policies for Amazon Redshift Spectrum](https://docs.aws.amazon.com/redshift/latest/dg/c-spectrum-iam-policies.html) which can help you step through the various roles, as well as [cross-account permissions](https://docs.aws.amazon.com/redshift/latest/dg/c-spectrum-iam-policies.html#spectrum-iam-policies-cross-account), and a specific  [call out for chaining roles](https://docs.aws.amazon.com/redshift/latest/dg/c-spectrum-iam-policies.html#c-spectrum-chaining-roles), if required.

Without looking at what you've done already, it is difficult to troubleshoot via re:Post... if you have an account team, I'd recommend chatting with the Solution Architect as a potential next step as they may be able to troubleshoot in conjunction with you.

Is it possible to have a Redshift Spectrum schema access multiple accounts data ?

相關內容