Skip to content

Enable Enhanced VPC Routing

Description

When you use Amazon Redshift Enhanced VPC Routing, Amazon Redshift forces all COPY and UNLOAD command traffic between your cluster and your data repositories through your virtual private cloud (VPC) based on the Amazon VPC service.

By using enhanced VPC routing, you can use standard VPC features, such as VPC security groups, network access control lists (ACLs), VPC endpoints, VPC endpoint policies, internet gateways, and Domain Name System (DNS) servers. You use these features to tightly manage the flow of data between your Amazon Redshift cluster and other resources. When you use enhanced VPC routing to route traffic through your VPC, you can also use VPC flow logs to monitor COPY and UNLOAD traffic.

For further information about Amazon Redshift Enhanced VPC Routing, refer to the Amazon Redshift Documentation. Information about the Amazon VPC service is described in the Amazon VPC User Guide.

Rationale

Enable Amazon Redshift Enhanced VPC Routing to force all COPY and UNLOAD traffic between your cluster and your data repositories through your Virtual Private Cloud (VPC).

Applies To

  • Databases

Tags

This rule is applied when the following tags are present:

Tag With Value
secureclouddb/provider aws
secureclouddb/service redshift

Default Rule

const { isAwsRedshift } = aws
/**
 * @param {Object} databaseSettings - database settings object
 * @returns {boolean} true if enhanced VPC routing is enabled
 */
function validate(databaseSettings) {
    const success =  isAwsRedshift(databaseSettings) && databaseSettings.awsDatabaseInstance.redshiftCluster.enhancedVpcRouting
    return {
        success,
    }
}

// invoke
validate(databaseSettings);