SELECT on the data Kubit should see. Nothing is copied out of your account.
Before you start
- Admin access to the Redshift cluster or Serverless workgroup, and to its AWS account
- The AWS region of the cluster
- The schema, tables or views Kubit should query
Steps
Grant access to Kubit's VPCs
Send the AWS region of your Redshift cluster to the Kubit team. Kubit replies with its AWS account ID and VPC IDs.Then follow AWS’s “Granting access to a VPC” guide for Redshift to allow access from those VPCs.
Create a user
In the database you share with Kubit, create a user for Kubit. The password has to meet Redshift’s password rules.
Grant read access
Let the Or limit it to specific tables or views:Replace
kubit user read your analytical data. Either grant access to every table in a schema:public, table_1 and table_2 with your own names.Verify
Check the grants as an admin. The output has one row per table withselect set to true.
Best practices
Cluster type
Kubit recommends Amazon Redshift Serverless. Analytical queries come in at unpredictable times, and Serverless bills per use (RPU hours).Sort and distribution keys
Kubit queries time series event data. For fact tables, use these sort keys:- An event date column
- Event name, since it’s the most common filter
Next steps
- Bring your own warehouse: how Kubit queries your warehouse in place.
- Allow Kubit’s IP ranges: let Kubit through a firewall.