Redshift

Connect to Amazon Redshift clusters and Redshift Serverless workgroups. Reeflow uses the PostgreSQL wire protocol so the credentials you create here are the same ones a Postgres client would use.

Prerequisites

Before creating a connection, you need:

1. A Redshift cluster or Serverless workgroup that is reachable from the public internet, or via a peering connection allowed for Reeflow’s egress IPs
2. A database user with SELECT permissions on the tables you want to query

Network access

Redshift clusters are private by default. To allow Reeflow to connect, either enable public access on the cluster and allow Reeflow’s egress IPs in the cluster security group, or set up a peering connection.

Creating a read-only database user

For security, create a dedicated read-only user rather than reusing an admin account. Redshift does not have a built-in global read role, so access is granted per schema:

UsernamePasswordDatabaseSchema

-- Create the user
CREATE USER reeflow_reader WITH PASSWORD 'your-secure-password';

-- Allow the user to connect to the database
GRANT CONNECT ON DATABASE analytics TO reeflow_reader;

-- Allow read access to the target schema
GRANT USAGE ON SCHEMA public TO reeflow_reader;
GRANT SELECT ON ALL TABLES IN SCHEMA public TO reeflow_reader;

-- Grant access to tables created later (run as the table owner)
ALTER DEFAULT PRIVILEGES IN SCHEMA public
GRANT SELECT ON TABLES TO reeflow_reader;

Tip

Repeat these grants for each schema you want Reeflow to access. Run ALTER DEFAULT PRIVILEGES as the role that owns your tables to ensure future tables are also accessible.

Configuration

When creating a Redshift connection in Reeflow, provide the following:

Field	Description
Host	Cluster endpoint, for example my-cluster.abc123.us-east-1.redshift.amazonaws.com
Port	Cluster port (default: 5439)
Username	The read-only user you created (e.g., reeflow_reader)
Password	Password for the database user
SSL	Enable SSL/TLS encryption. Required for Redshift clusters reachable over the public internet.
Database	Name of the database queries are issued against. Reeflow connects directly to this database, so it must already exist on the cluster.
Schema	Optional default schema. Auto-discovered from the database above. Defaults to public when omitted.

Tip

Always keep SSL enabled for Redshift connections. Most Redshift clusters require encrypted connections by policy.

Creating a connection

Create a Redshift connection

Add an Amazon Redshift cluster as a data source in Reeflow.

Navigate to Connections in the main navigation, then click New Connection.

Enter a Name for the connection and an optional Description.

Select Amazon Redshift as the connection type.

Enter your cluster Host, Port, Username, and Password. Keep SSL enabled.

Type the Database name. Reeflow connects to it and the Schema dropdown populates with the schemas visible inside.

Click Test Connection to verify your credentials are correct.

Click Create Connection to save. The connection appears in your connections list.

1

2

3

4

5

6

7

Navigate to Connections in the main navigation, then click New Connection.

Enter a Name for the connection and an optional Description.

Select Amazon Redshift as the connection type.

Enter your cluster Host, Port, Username, and Password. Keep SSL enabled.

Type the Database name. Reeflow connects to it and the Schema dropdown populates with the schemas visible inside.

Click Test Connection to verify your credentials are correct.

Click Create Connection to save. The connection appears in your connections list.

PreviousNext

Related

• Connections overview
• Connection and table security