IAM policy requirements for accessing clusters and namespaces registered to the Data Catalog - Amazon Redshift

Amazon Redshift will no longer support the creation of new Python UDFs starting November 1, 2025. If you would like to use Python UDFs, create the UDFs prior to that date. Existing Python UDFs will continue to function as normal. For more information, see the blog post .

IAM policy requirements for accessing clusters and namespaces registered to the Data Catalog

This topic describes the required IAM permissions for registering provisioned clusters and serverless namespaces to the Data Catalog and accessing them with Amazon Redshift.

After you register a provisioned cluster or serverless namespace to the AWS Glue Data Catalog, you need the following permissions to discover the creation of and changes to the subsequently created catalog.

  • glue:GetCatalog

  • glue:GetCatalogs

  • lakeformation:GetDataAccess

These permissions are included in the service-linked role AmazonRedshiftServiceLinkedRolePolicy. For more information on this role, see Using service-linked roles for Amazon Redshift in the Amazon Redshift Management Guide.