pulumi-aws-native-kotlin/com.pulumi.awsnative.quicksight.kotlin.outputs/DataSourceRedshiftIamParameters

DataSourceRedshiftIamParameters

data class DataSourceRedshiftIamParameters(val autoCreateDatabaseUser: Boolean? = null, val databaseGroups: List<String>? = null, val databaseUser: String? = null, val roleArn: String)

A structure that grants Amazon QuickSight access to your cluster and make a call to the redshift:GetClusterCredentials API. For more information on the redshift:GetClusterCredentials API, see GetClusterCredentials .

Constructors

constructor(autoCreateDatabaseUser: Boolean? = null, databaseGroups: List<String>? = null, databaseUser: String? = null, roleArn: String)

Types

Companion

object Companion

Properties

autoCreateDatabaseUser

val autoCreateDatabaseUser: Boolean? = null

Automatically creates a database user. If your database doesn't have a DatabaseUser, set this parameter to True. If there is no DatabaseUser, Amazon QuickSight can't connect to your cluster. The RoleArn that you use for this operation must grant access to redshift:CreateClusterUser to successfully create the user.

databaseGroups

val databaseGroups: List<String>? = null

A list of groups whose permissions will be granted to Amazon QuickSight to access the cluster. These permissions are combined with the permissions granted to Amazon QuickSight by the DatabaseUser. If you choose to include this parameter, the RoleArn must grant access to redshift:JoinGroup.

databaseUser

val databaseUser: String? = null

The user whose permissions and group memberships will be used by Amazon QuickSight to access the cluster. If this user already exists in your database, Amazon QuickSight is granted the same permissions that the user has. If the user doesn't exist, set the value of AutoCreateDatabaseUser to True to create a new user with PUBLIC permissions.

roleArn

val roleArn: String

Use the RoleArn structure to allow Amazon QuickSight to call redshift:GetClusterCredentials on your cluster. The calling principal must have iam:PassRole access to pass the role to Amazon QuickSight. The role's trust policy must allow the Amazon QuickSight service principal to assume the role.