Skip to main content

endpoint_authorization

Gets an individual endpoint_authorization resource

Overview

Nameendpoint_authorization
TypeResource
Descriptionendpoint_authorization
Idawscc.redshift.endpoint_authorization

Fields

NameDatatypeDescription
grantorstringThe AWS account ID of the cluster owner.
granteestringThe AWS account ID of the grantee of the cluster.
cluster_identifierstringThe cluster identifier.
authorize_timestringThe time (UTC) when the authorization was created.
cluster_statusstringThe status of the cluster.
statusstringThe status of the authorization action.
allowed_all_vpcsbooleanIndicates whether all VPCs in the grantee account are allowed access to the cluster.
allowed_vpcsarrayThe VPCs allowed access to the cluster.
endpoint_countintegerThe number of Redshift-managed VPC endpoints created for the authorization.
accountstringThe target AWS account ID to grant or revoke access for.
vpc_idsarrayThe virtual private cloud (VPC) identifiers to grant or revoke access to.
forceboolean Indicates whether to force the revoke action. If true, the Redshift-managed VPC endpoints associated with the endpoint authorization are also deleted.
regionstringAWS region.

Methods

Currently only SELECT is supported for this resource resource.

Example

SELECT
region,
grantor,
grantee,
cluster_identifier,
authorize_time,
cluster_status,
status,
allowed_all_vpcs,
allowed_vpcs,
endpoint_count,
account,
vpc_ids,
force
FROM awscc.redshift.endpoint_authorization
WHERE data__Identifier = '<ClusterIdentifier>|<Account>';

Permissions

To operate on the endpoint_authorization resource, the following permissions are required:

Read

redshift:DescribeEndpointAuthorization

Update

redshift:AuthorizeEndpointAccess,
redshift:DescribeEndpointAuthorization,
redshift:RevokeEndpointAccess

Delete

redshift:RevokeEndpointAccess,
redshift:DeleteEndpointAccess,
redshift:DescribeEndpointAuthorization,
ec2:DeleteClientVpnEndpoint,
ec2:DescribeVpcAttribute,
ec2:DescribeSecurityGroups,
ec2:DescribeAddresses,
ec2:DescribeInternetGateways,
ec2:DescribeSubnets