Configure an Amazon Redshift connection

Who can use this feature?

Global admins or users with advanced permissions
Available on all plans

An Amazon Redshift connector is a pure database connection; it is built as a connector and an SQL query powers the connection.

A connection is an authentication mechanism to allow Totango to integrate with another system. Each connector has different requirements for connection. You can reuse connections to support multiple integration jobs.

Data warehouse integrations are a closed system; you cannot reuse data warehouse connections for other integration families.

1. Create an Amazon Redshift user

We recommend that you create a specific user for fetching data with proper database access permissions (e.g. read-only access to a specific schema or a table).

Connect to your Amazon Redshift database.
Create a read-only group:
```
CREATE GROUP totango_ro_group;
```

Create a user for Totango (assume read-only):

CREATE USER totango_ro_user PASSWORD'A Secure Password of your choosing';

Add user to the read-only group:

ALTER GROUP totango_ro_group ADD USER totango_ro_user;

Grant usage permission to read-only group to specific schema:

GRANT USAGE ON SCHEMA "your_schema" TO GROUP totango_ro_group;

Grant select permission to read-only group to specific schema:

GRANT SELECT ON ALL TABLES IN SCHEMA "your_schema" TO GROUP totango_ro_group;

Alter default privileges to maintain the permissions on new tables:

ALTER DEFAULT PRIVILEGES IN SCHEMA "your_schema" GRANT SELECT ON TABLES TO GROUP totango_ro_group;

Revoke create privileges:

REVOKE CREATE ON SCHEMA "your_schema" FROM GROUP totango_ro_group;

2. Create an Amazon Redshift connection in Totango

In the event that your network is behind a firewall, you will need to whitelist our servers so that we may retrieve information from your data warehouse.

In Totango, click Settings from the left nav.
Expand Data Management > Customer Data Hub.
From the list of active connectors (left), choose Data Warehouses.
From the list of available connectors, hover over Amazon Redshift, and click Connect (or View Integrations).
Enter a name and description for the connection. Because you can have multiple connections with a connector (using different authentication profiles), a name and description helps you identify the connection later.
Add the remaining details for the connection:
- Username: Username of the user you plan to give access to your database for Totango
- Password: Password of the user
- Schema: Schema where this connector data should be fetched from
- Database: Database where this connector data should be fetched from
- Host name: Host name of your Amazon Redshift instance. You can find the hostname from this path: Amazon console > Amazon Redshift > Clusters > Your cluster name > Properties > Connection details.
- Port: Port of the Amazon Redshift instance. By default, it is 5439.
Click Connect.

You can now set up an integration using the connection.

All data warehouse connectors support SSL encryption. By default, Totango uses SSL encryption during connecting. If the data warehouse server does not support SSL encryption, the connection will use an unencrypted connection to stream data from the data warehouse.