Amazon_Redshift_8

Ensure Redshift Cluster is In VPC

Description

Redshift clusters are should within the AWS EC2-VPC platform for better flexibility and control over clusters security, traffic routing, availability and more.

Remediation

1. Login to the AWS Management Console.

2. Navigate to Redshift.

3. In the left navigation panel, under Redshift Dashboard, click Clusters.

4. Click Launch Cluster button from the dashboard top menu to start the cluster setup process.

5. On the Cluster Details configuration page, enter a unique name for your new cluster in the Cluster Identifier field and fill out the rest of the fields available on this page with the information taken from the existing cluster, launched with the EC2-Classic platform.

6. Click the Continue button to continue the setup process.

7. On the Node Configuration page, select the appropriate node type for the new cluster from the Node Type dropdown list and configure the number of nodes used to match the existing (EC2-Classic) cluster configuration.

8. Click Continue to load the next page.

9. On the Additional Configuration page, perform the following actions:

  1. Within the first configuration section, select the parameter group to associate with the cluster from the Cluster Parameter Group dropdown list and make sure that the cluster database encryption configuration does match the existing EC2-Classic cluster configuration.
  2. Within the Configure Networking Options section, provide the following information:
    • Select the name of the Virtual Private Cloud in which you want to launch the cluster from the Choose a VPC dropdown list.
    • Select the name of the subnet group that you want to assign to your cluster from the Cluster Subnet Group dropdown list. Choose default to use the default subnet group created automatically for your EC2-VPC Redshift clusters.
    • For Publicly Accessible, choose whether or not you want the cluster to be publicly accessible on the Internet. If you select Yes, you can also choose to attach an elastic IP (EIP) using the Choose a Public IP Address setting.
    • For Enhanced VPC Routing, you can choose whether or not to enable the Enhanced VPC Routing feature that provides the capability to force all COPY/UNLOAD traffic between the cluster and your data repository through the VPC network selected above.
    • Select the name of the availability zone in which you want to launch the cluster from the Availability Zone dropdown list.
  3. Select the appropriate security group(s) to associate with your new cluster from the VPC Security Groups list.
  4. (Optional) For Create CloudWatch Alarm, choose whether or not you want to create an AWS CloudWatch alarm to monitor the cluster disk usage.
  5. (Optional) Select an existing role from the AvailableRolesdropdown list if you need to associate an IAM role with your Redshift cluster.

10. Click Continue to load the next page.

11. On the Review page, review the new cluster properties, its database details and the VPC environment configuration details where it will be provisioned, then click Launch Cluster to launch the cluster.

12. On the confirmation page click Close to return to the Redshift dashboard. Once the Cluster Status value changes to available and the DB Health status changes to healthy, the new cluster can be used to load the existing data from the one created with the EC2-Classic platform.

13. Unload your data from the EC2-Classic Redshift cluster and reload it into the newly created cluster using the Amazon Redshift Unload/Copy utility. With this utility tool you can unload (export) your data from the unencrypted cluster (source) to an AWS S3 bucket, then import it into your new cluster (destination) and clean up the S3 bucket used. A14) As soon as the migration process is completed and all the data is loaded into the new Redshift cluster, launched within your Virtual Private Cloud, you can update your application configuration to refer to the new cluster endpoint.

14. Once the Redshift cluster endpoint is changed within your application configuration, you can remove the EC2-Classic cluster from your AWS account by performing the following actions:

  1. In the navigation panel, under Redshift Dashboard, click Clusters.
  2. Choose the Redshift cluster that you want to remove then click on its identifier link available in the Cluster column.
  3. On the selected cluster Configuration tab, click the Cluster drop-down button from the dashboard main menu then select Delete from the dropdown list.

Service

Redshift

Severity

Medium

Compliance

Mapping

We are now live on AWS Marketplace.
The integrated view of your cloud infrastructure is now easier than ever!