> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cloud.cdata.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Amazon Redshift

export const title_4 = "Amazon Redshift";

export const title_3 = "Amazon Redshift";

export const title_2 = "Amazon Redshift";

export const title_1 = "Amazon Redshift";

export const title_0 = "Amazon Redshift";

## Prerequisites

#### Whitelist CData IPs

To establish a connection to Amazon Redshift, you need to allow access to Amazon Redshift via CData’s IP. When hosting Amazon Redshift behind a firewall, you must safelist these IP addresses in your firewall.

* Range: `52.224.0.160` to `52.224.0.175` and `4.154.117.160` to `4.154.117.175`.
* CIDR notation: `52.224.0.160/28` and `4.154.117.160/28`

#### Ensure Amazon Redshift Is Publicly Accessible

Provide a public facing IP/domain to connect to this data source. The following private IP ranges do not work:

* `10.0.0.0` to `10.255.255.255`
* `172.16.0.0` to `172.31.255.255`
* `192.168.0.0` to `192.168.255.255`
* `127.0.0.1` (aka ‘localhost’)

## Setup Guide

Follow these steps to connect Amazon Redshift to your Connect AI account:

<Steps>
  <Step>
    Open the **Sources** page of the Connect AI navigation menu.
  </Step>

  <Step>
    Click **+ Add Connection** in the upper-right corner.
  </Step>

  <Step>
    Type *Amazon Redshift* into the search field, then click the data source name.
  </Step>

  <Step>
    On the **Basic Settings** tab of the new connection, enter a connection name or keep the default name.
  </Step>

  <Step>
    Enter the host name or IP address of the Amazon Redshift cluster into the **Server** field.
  </Step>

  <Step>
    Enter the Amazon Redshift **Database**.
  </Step>

  <Step>
    Select the Authentication method, then proceed to the relevant section and follow those instructions.
  </Step>
</Steps>

## Authentication Methods

<Tabs>
  <Tab title="Basic">
    <Steps>
      <Step>
        Enter the Amazon Redshift username for authentication in the **User** field.
      </Step>

      <Step>
        Enter the user password.
      </Step>

      <Step>
        Enter the port for connecting to the Amazon Redshift server in the **Port** field.
      </Step>

      <Step>
        Enter the **AWS Principal ARN** to use during authentication if you have multiple Identity Providers in your AWS account.
      </Step>

      <Step>
        In Amazon Redshift, add the Connect AI static IP addresses to your connection whitelist.
      </Step>

      <Step>
        At the top of the Connect AI **Add {title_0} Connection** page, click **Save & Test**.

        * If the connection test succeeds, a **Connection successfully saved** message appears, indicating that your connection has been created. The **Status** on the **Edit Connection** page also changes to **Authenticated**. View the data model of your successful connection in the right pane of the **Edit Connection** page, in the **Data Model** tab.
        * If the connection test fails, ensure that you entered your login information correctly with no stray spaces or other characters. Connect AI displays error messages under the required fields with missing data. Some data sources require that you sign in directly to the source website. If you did not, an error message appears under the **Sign in** button. Correct the errors and try again.
        * Unsuccessful connections are saved as drafts and have a **Status** of **Not Authenticated**. You can return to the connection and authenticate it later.
      </Step>
    </Steps>
  </Tab>

  <Tab title="ADFS">
    <Steps>
      <Step>
        Enter the Amazon Redshift username for authentication in the **User** field.
      </Step>

      <Step>
        Enter the user password.
      </Step>

      <Step>
        Enter the **SSO Login URL**.
      </Step>

      <Step>
        Enter all relevant **SSO Properties**, with the format 'ssoproperty1=value1;ssoproperty2=value2;ssoproperty3=value3;'. Make sure to separate all property-value pairs with semicolons.
      </Step>

      <Step>
        Enter the port for connecting to the Amazon Redshift server in the **Port** field.
      </Step>

      <Step>
        Enter the **AWS Principal ARN** to use during authentication if you have multiple Identity Providers in your AWS account.
      </Step>

      <Step>
        In Amazon Redshift, add the Connect AI static IP addresses to your connection whitelist.
      </Step>

      <Step>
        At the top of the Connect AI **Add {title_1} Connection** page, click **Save & Test**.

        * If the connection test succeeds, a **Connection successfully saved** message appears, indicating that your connection has been created. The **Status** on the **Edit Connection** page also changes to **Authenticated**. View the data model of your successful connection in the right pane of the **Edit Connection** page, in the **Data Model** tab.
        * If the connection test fails, ensure that you entered your login information correctly with no stray spaces or other characters. Connect AI displays error messages under the required fields with missing data. Some data sources require that you sign in directly to the source website. If you did not, an error message appears under the **Sign in** button. Correct the errors and try again.
        * Unsuccessful connections are saved as drafts and have a **Status** of **Not Authenticated**. You can return to the connection and authenticate it later.
      </Step>
    </Steps>
  </Tab>

  <Tab title="IAMCredentials">
    <Steps>
      <Step>
        Enter the Amazon Redshift username for authentication in the **User** field.
      </Step>

      <Step>
        Enter your **AWS Access Key**.
      </Step>

      <Step>
        Enter your **AWS Secret Key**.
      </Step>

      <Step>
        Enter the port for connecting to the Amazon Redshift server in the **Port** field.
      </Step>

      <Step>
        Enter the **AWS Principal ARN** to use during authentication if you have multiple Identity Providers in your AWS account.
      </Step>

      <Step>
        In Amazon Redshift, add the Connect AI static IP addresses to your connection whitelist.
      </Step>

      <Step>
        At the top of the Connect AI **Add {title_2} Connection** page, click **Save & Test**.

        * If the connection test succeeds, a **Connection successfully saved** message appears, indicating that your connection has been created. The **Status** on the **Edit Connection** page also changes to **Authenticated**. View the data model of your successful connection in the right pane of the **Edit Connection** page, in the **Data Model** tab.
        * If the connection test fails, ensure that you entered your login information correctly with no stray spaces or other characters. Connect AI displays error messages under the required fields with missing data. Some data sources require that you sign in directly to the source website. If you did not, an error message appears under the **Sign in** button. Correct the errors and try again.
        * Unsuccessful connections are saved as drafts and have a **Status** of **Not Authenticated**. You can return to the connection and authenticate it later.
      </Step>
    </Steps>
  </Tab>

  <Tab title="PingFederate">
    <Steps>
      <Step>
        Enter the Amazon Redshift username for authentication in the **User** field.
      </Step>

      <Step>
        Enter the user password.
      </Step>

      <Step>
        Enter the **SSO Login URL**.
      </Step>

      <Step>
        Enter the **SSO Properties**, with the format 'ssoproperty1=value1;ssoproperty2=value2;ssoproperty3=value3;'. Make sure to separate all property-value pairs with semicolons.
      </Step>

      <Step>
        Add the **SSO Exchange URL**.
      </Step>

      <Step>
        Enter the port for connecting to the Amazon Redshift server in the **Port** field.
      </Step>

      <Step>
        Enter the **AWS Principal ARN** to use during authentication if you have multiple Identity Providers in your AWS account.
      </Step>

      <Step>
        In Amazon Redshift, add the Connect AI static IP addresses to your connection whitelist.
      </Step>

      <Step>
        At the top of the Connect AI **Add {title_3} Connection** page, click **Save & Test**.

        * If the connection test succeeds, a **Connection successfully saved** message appears, indicating that your connection has been created. The **Status** on the **Edit Connection** page also changes to **Authenticated**. View the data model of your successful connection in the right pane of the **Edit Connection** page, in the **Data Model** tab.
        * If the connection test fails, ensure that you entered your login information correctly with no stray spaces or other characters. Connect AI displays error messages under the required fields with missing data. Some data sources require that you sign in directly to the source website. If you did not, an error message appears under the **Sign in** button. Correct the errors and try again.
        * Unsuccessful connections are saved as drafts and have a **Status** of **Not Authenticated**. You can return to the connection and authenticate it later.
      </Step>
    </Steps>
  </Tab>

  <Tab title="AzureAD">
    <Steps>
      <Step>
        Enter the Amazon Redshift username for authentication in the **User** field.
      </Step>

      <Step>
        Enter the **Azure Tenant** Id to connect to.
      </Step>

      <Step>
        Enter the **SSO Login URL**.
      </Step>

      <Step>
        Enter the **OAuth Client Id** found in the Overview page of your Amazon Redshift application settings.
      </Step>

      <Step>
        Enter your **OAuth Client Secret**.
      </Step>

      <Step>
        Enter the **Scope**. For v1.0 OAuth tokens, this matches the **Scopes** field in the Expose of an API page of your OAuth app. For v2.0 OAuth tokens, it is the same as the app's Client Id.
      </Step>

      <Step>
        Enter the port for connecting to the Amazon Redshift server in the **Port** field.
      </Step>

      <Step>
        Enter the **AWS Principal ARN** to use during authentication if you have multiple Identity Providers in your AWS account.
      </Step>

      <Step>
        Click **Sign in** to connect securely through OAuth. This action opens the Amazon Redshift sign-in page in a new tab.
      </Step>

      <Step>
        Log in to your Amazon Redshift account and provide the requested permissions (if applicable).
      </Step>

      <Step>
        In Amazon Redshift, add the Connect AI static IP addresses to your connection whitelist.
      </Step>

      <Step>
        At the top of the Connect AI **Add {title_4} Connection** page, click **Save & Test**.

        * If the connection test succeeds, a **Connection successfully saved** message appears, indicating that your connection has been created. The **Status** on the **Edit Connection** page also changes to **Authenticated**. View the data model of your successful connection in the right pane of the **Edit Connection** page, in the **Data Model** tab.
        * If the connection test fails, ensure that you entered your login information correctly with no stray spaces or other characters. Connect AI displays error messages under the required fields with missing data. Some data sources require that you sign in directly to the source website. If you did not, an error message appears under the **Sign in** button. Correct the errors and try again.
        * Unsuccessful connections are saved as drafts and have a **Status** of **Not Authenticated**. You can return to the connection and authenticate it later.
      </Step>
    </Steps>
  </Tab>
</Tabs>

## More Information

For more information about interactions between Connect AI and Amazon Redshift, see [this information page](https://cdn.cdata.com/help/FRM/cloud/default.htm#default).