翻訳は機械翻訳により提供されています。提供された翻訳内容と英語版の間で齟齬、不一致または矛盾がある場合、英語版が優先します。
AWS 管理ポリシー: AmazonDataZoneRedshiftManageAccessRolePolicy
このポリシーは、Amazon Redshift データをカタログに発行するアクセス DataZone 許可を Amazon に付与します。また、カタログ内の Amazon Redshift または Amazon Redshift Serverless が公開したアセットへのアクセスを許可または取り消すアクセス DataZone 許可も Amazon に付与します。
{ "Version": "2012-10-17", "Statement": [ { "Sid": "redshiftDataScopeDownPermissions", "Effect": "Allow", "Action": [ "redshift-data:BatchExecuteStatement", "redshift-data:DescribeTable", "redshift-data:ExecuteStatement", "redshift-data:ListTables", "redshift-data:ListSchemas", "redshift-data:ListDatabases" ], "Resource": [ "arn:aws:redshift-serverless:*:*:workgroup/*", "arn:aws:redshift:*:*:cluster:*" ], "Condition": { "StringEquals": { "aws:ResourceAccount": "${aws:PrincipalAccount}" } } }, { "Sid": "listSecretsPermission", "Effect": "Allow", "Action": "secretsmanager:ListSecrets", "Resource": "*" }, { "Sid": "getWorkgroupPermission", "Effect": "Allow", "Action": "redshift-serverless:GetWorkgroup", "Resource": [ "arn:aws:redshift-serverless:*:*:workgroup/*" ], "Condition": { "StringEquals": { "aws:ResourceAccount": "${aws:PrincipalAccount}" } } }, { "Sid": "getNamespacePermission", "Effect": "Allow", "Action": "redshift-serverless:GetNamespace", "Resource": [ "arn:aws:redshift-serverless:*:*:namespace/*" ], "Condition": { "StringEquals": { "aws:ResourceAccount": "${aws:PrincipalAccount}" } } }, { "Sid": "redshiftDataPermissions", "Effect": "Allow", "Action": [ "redshift-data:DescribeStatement", "redshift-data:GetStatementResult", "redshift:DescribeClusters" ], "Resource": "*" }, { "Sid": "dataSharesPermissions", "Effect": "Allow", "Action": [ "redshift:AuthorizeDataShare", "redshift:DescribeDataShares" ], "Resource": [ "arn:aws:redshift:*:*:datashare:*/datazone*" ], "Condition": { "StringEquals": { "aws:ResourceAccount": "${aws:PrincipalAccount}" } } }, { "Sid": "associateDataShareConsumerPermission", "Effect": "Allow", "Action": "redshift:AssociateDataShareConsumer", "Resource": "arn:aws:redshift:*:*:datashare:*/datazone*" } ] }