AWS prescriptive-guidance documentation change
Summary
Updated documentation formatting by replacing curly quotes with straight quotes and minor author attribution changes. No substantive content changes to security configurations or procedures.
Security assessment
The changes are purely stylistic (quote mark standardization) and do not modify security recommendations. Existing security guidance about EC2/Redshift security group rules (port 22/5439 access) and IAM policies remains unchanged in substance.
Diff
diff --git a/prescriptive-guidance/latest/patterns/migrate-an-amazon-redshift-cluster-to-an-aws-region-in-china.md b/prescriptive-guidance/latest/patterns/migrate-an-amazon-redshift-cluster-to-an-aws-region-in-china.md index 849ef7f16..3607150a1 100644 --- a//prescriptive-guidance/latest/patterns/migrate-an-amazon-redshift-cluster-to-an-aws-region-in-china.md +++ b//prescriptive-guidance/latest/patterns/migrate-an-amazon-redshift-cluster-to-an-aws-region-in-china.md @@ -9 +9 @@ SummaryPrerequisites and limitationsArchitectureToolsEpicsRelated resourcesAddit - _Created by Jing Yan (AWS)_ + _Jing Yan, Amazon Web Services_ @@ -74,8 +74,8 @@ Task| Description| Skills required -Launch and configure an EC2 instance in the source Region.| Sign in to the AWS Management Console and open the Amazon Elastic Compute Cloud (Amazon EC2) console. Your current Region is displayed in the navigation bar at the top of the screen. This Region cannot be an AWS Region in China. From the Amazon EC2 console dashboard, choose “Launch instance,” and create and configure an EC2 instance. Important: Ensure your EC2 security groups for inbound rules allow unrestricted access to TCP port 22 from your source machine. For instructions on how to launch and configure an EC2 instance, see the “Related resources” section.| DBA, Developer -Install the psql tool.| Download and install PostgreSQL. Amazon Redshift does not provide the psql tool, it is installed with PostgreSQL. For more information about using psql and installing PostgreSQL tools, see the “Related resources” section.| DBA -Record the Amazon Redshift cluster details. | Open the Amazon Redshift console, and choose “Clusters” in the navigation pane. Then choose the Amazon Redshift cluster name from the list. On the “Properties” tab, in the “Database configurations” section, record the “Database name” and “Port.” Open the “Connection details” section and record the “Endpoint,” which is in the “endpoint:<port>/<databasename>” format. Important: Ensure your Amazon Redshift security groups for inbound rules allow unrestricted access to TCP port 5439 from your EC2 instance.| DBA -Connect psql to the Amazon Redshift cluster. | At a command prompt, specify the connection information by running the “psql -h <endpoint> -U <userid> -d <databasename> -p <port>” command. At the psql password prompt, enter the password for the “<userid>” user. You are then connected to the Amazon Redshift cluster and can interactively enter commands.| DBA -Create an S3 bucket. | Open the Amazon S3 console, and create an S3 bucket to hold the files exported from Amazon Redshift. For instructions on how to create an S3 bucket, see the “Related resources” section.| DBA, AWS General -Create an IAM policy that supports unloading data.| Open the AWS Identity and Access Management (IAM) console and choose “Policies.” Choose “Create policy,” and choose the “JSON” tab. Copy and paste the IAM policy for unloading data from the “Additional information” section. Important: Replace “s3_bucket_name” with your S3 bucket’s name. Choose “Review policy,” and enter a name and description for the policy. Choose “Create policy.”| DBA -Create an IAM role to allow UNLOAD operation for Amazon Redshift.| Open the IAM console and choose “Roles.” Choose “Create role,” and choose “AWS service” in “Select type of trusted entity.” Choose “Redshift” for the service, choose “Redshift – Customizable,” and then choose “Next.” Choose the “Unload” policy you created earlier, and choose “Next.” Enter a “Role name,” and choose “Create role.”| DBA -Associate IAM role with the Amazon Redshift cluster. | Open the Amazon Redshift console, and choose “Manage IAM roles.” Choose “Available roles” from the dropdown menu and choose the role you created earlier. Choose “Apply changes.” When the “Status” for the IAM role on the “Manage IAM roles” shows as “In-sync”, you can run the UNLOAD command.| DBA +Launch and configure an EC2 instance in the source Region.| Sign in to the AWS Management Console and open the Amazon Elastic Compute Cloud (Amazon EC2) console. Your current Region is displayed in the navigation bar at the top of the screen. This Region cannot be an AWS Region in China. From the Amazon EC2 console dashboard, choose "Launch instance," and create and configure an EC2 instance. Important: Ensure your EC2 security groups for inbound rules allow unrestricted access to TCP port 22 from your source machine. For instructions on how to launch and configure an EC2 instance, see the "Related resources" section.| DBA, Developer +Install the psql tool.| Download and install PostgreSQL. Amazon Redshift does not provide the psql tool, it is installed with PostgreSQL. For more information about using psql and installing PostgreSQL tools, see the "Related resources" section.| DBA +Record the Amazon Redshift cluster details. | Open the Amazon Redshift console, and choose "Clusters" in the navigation pane. Then choose the Amazon Redshift cluster name from the list. On the "Properties" tab, in the "Database configurations" section, record the "Database name" and "Port." Open the "Connection details" section and record the "Endpoint," which is in the "endpoint:<port>/<databasename>" format. Important: Ensure your Amazon Redshift security groups for inbound rules allow unrestricted access to TCP port 5439 from your EC2 instance.| DBA +Connect psql to the Amazon Redshift cluster. | At a command prompt, specify the connection information by running the "psql -h <endpoint> -U <userid> -d <databasename> -p <port>" command. At the psql password prompt, enter the password for the "<userid>" user. You are then connected to the Amazon Redshift cluster and can interactively enter commands.| DBA +Create an S3 bucket. | Open the Amazon S3 console, and create an S3 bucket to hold the files exported from Amazon Redshift. For instructions on how to create an S3 bucket, see the "Related resources" section.| DBA, AWS General +Create an IAM policy that supports unloading data.| Open the AWS Identity and Access Management (IAM) console and choose "Policies." Choose "Create policy," and choose the "JSON" tab. Copy and paste the IAM policy for unloading data from the "Additional information" section. Important: Replace "s3_bucket_name" with your S3 bucket’s name. Choose "Review policy," and enter a name and description for the policy. Choose "Create policy."| DBA +Create an IAM role to allow UNLOAD operation for Amazon Redshift.| Open the IAM console and choose "Roles." Choose "Create role," and choose "AWS service" in "Select type of trusted entity." Choose "Redshift" for the service, choose "Redshift – Customizable," and then choose "Next." Choose the "Unload" policy you created earlier, and choose "Next." Enter a "Role name," and choose "Create role."| DBA +Associate IAM role with the Amazon Redshift cluster. | Open the Amazon Redshift console, and choose "Manage IAM roles." Choose "Available roles" from the dropdown menu and choose the role you created earlier. Choose "Apply changes." When the "Status" for the IAM role on the "Manage IAM roles" shows as "In-sync", you can run the UNLOAD command.| DBA @@ -86,7 +86,7 @@ Task| Description| Skills required -Launch and configure an EC2 instance in the target Region.| Sign in to the AWS Management Console for a Region in China, either Beijing or Ningxia. From the Amazon EC2 console, choose “Launch instance,” and create and configure an EC2 instance. Important: Make sure your Amazon EC2 security groups for inbound rules allow unrestricted access to TCP port 22 from your source machine. For further instructions on how to launch and configure an EC2 instance, see the “Related resources” section.| DBA -Record the Amazon Redshift cluster details. | Open the Amazon Redshift console, and choose “Clusters” in the navigation pane. Then choose the Amazon Redshift cluster name from the list. On the “Properties” tab, in the “Database configurations” section, record the “Database name” and “Port.” Open the “Connection details” section and record the “Endpoint,” which is in the “endpoint:<port>/<databasename>” format. Important: Make sure your Amazon Redshift security groups for inbound rules allow unrestricted access to TCP port 5439 from your EC2 instance.| DBA -Connect psql to the Amazon Redshift cluster. | At a command prompt, specify the connection information by running the “psql -h <endpoint> -U <userid> -d <databasename> -p <port>” command. At the psql password prompt, enter the password for the “<userid>” user. You are then connected to the Amazon Redshift cluster and can interactively enter commands.| DBA -Create an S3 bucket. | Open the Amazon S3 console, and create an S3 bucket to hold the exported files from Amazon Redshift. For help with this and other stories, see the “Related resources” section.| DBA -Create an IAM policy that supports copying data.| Open the IAM console and choose “Policies.” Choose “Create policy,” and choose the “JSON” tab. Copy and paste the IAM policy for copying data from the “Additional information” section. Important: Replace “s3_bucket_name” with your S3 bucket’s name. Choose “Review policy,” enter a name and description for the policy. Choose “Create policy.”| DBA -Create an IAM role to allow COPY operation for Amazon Redshift.| Open the IAM console and choose “Roles.” Choose “Create role,” and choose “AWS service” in “Select type of trusted entity.” Choose “Redshift” for the service, choose “Redshift – Customizable,” and then choose “Next.” Choose the “Copy” policy you created earlier, and choose “Next.” Enter a “Role name,” and choose “Create role.”| DBA -Associate IAM role with the Amazon Redshift cluster. | Open the Amazon Redshift console, and choose “Manage IAM roles.” Choose “Available roles” from the dropdown menu and choose the role you created earlier. Choose “Apply changes.” When the “Status” for the IAM role on the “Manage IAM roles” shows as “In-sync”, you can run the “COPY” command.| DBA +Launch and configure an EC2 instance in the target Region.| Sign in to the AWS Management Console for a Region in China, either Beijing or Ningxia. From the Amazon EC2 console, choose "Launch instance," and create and configure an EC2 instance. Important: Make sure your Amazon EC2 security groups for inbound rules allow unrestricted access to TCP port 22 from your source machine. For further instructions on how to launch and configure an EC2 instance, see the "Related resources" section.| DBA +Record the Amazon Redshift cluster details. | Open the Amazon Redshift console, and choose "Clusters" in the navigation pane. Then choose the Amazon Redshift cluster name from the list. On the "Properties" tab, in the "Database configurations" section, record the "Database name" and "Port." Open the "Connection details" section and record the "Endpoint," which is in the "endpoint:<port>/<databasename>" format. Important: Make sure your Amazon Redshift security groups for inbound rules allow unrestricted access to TCP port 5439 from your EC2 instance.| DBA +Connect psql to the Amazon Redshift cluster. | At a command prompt, specify the connection information by running the "psql -h <endpoint> -U <userid> -d <databasename> -p <port>" command. At the psql password prompt, enter the password for the "<userid>" user. You are then connected to the Amazon Redshift cluster and can interactively enter commands.| DBA +Create an S3 bucket. | Open the Amazon S3 console, and create an S3 bucket to hold the exported files from Amazon Redshift. For help with this and other stories, see the "Related resources" section.| DBA +Create an IAM policy that supports copying data.| Open the IAM console and choose "Policies." Choose "Create policy," and choose the "JSON" tab. Copy and paste the IAM policy for copying data from the "Additional information" section. Important: Replace "s3_bucket_name" with your S3 bucket’s name. Choose "Review policy," enter a name and description for the policy. Choose "Create policy."| DBA +Create an IAM role to allow COPY operation for Amazon Redshift.| Open the IAM console and choose "Roles." Choose "Create role," and choose "AWS service" in "Select type of trusted entity." Choose "Redshift" for the service, choose "Redshift – Customizable," and then choose "Next." Choose the "Copy" policy you created earlier, and choose "Next." Enter a "Role name," and choose "Create role."| DBA +Associate IAM role with the Amazon Redshift cluster. | Open the Amazon Redshift console, and choose "Manage IAM roles." Choose "Available roles" from the dropdown menu and choose the role you created earlier. Choose "Apply changes." When the "Status" for the IAM role on the "Manage IAM roles" shows as "In-sync", you can run the "COPY" command.| DBA @@ -96,2 +96,2 @@ Task| Description| Skills required -Verify the rows in the source Amazon Redshift tables.| Use the scripts in the “Additional information” section to verify and record the number of rows in the source Amazon Redshift tables. Remember to split the data evenly for the UNLOAD and COPY scripts. This will improve the data unloading and loading efficiency, because the data quantity covered by each script will be balanced.| DBA -Verify the number of database objects in the source Amazon Redshift cluster.| Use the scripts in the “Additional information” section to verify and record the number of databases, users, schemas, tables, views, and user-defined functions (UDFs) in your source Amazon Redshift cluster.| DBA +Verify the rows in the source Amazon Redshift tables.| Use the scripts in the "Additional information" section to verify and record the number of rows in the source Amazon Redshift tables. Remember to split the data evenly for the UNLOAD and COPY scripts. This will improve the data unloading and loading efficiency, because the data quantity covered by each script will be balanced.| DBA +Verify the number of database objects in the source Amazon Redshift cluster.| Use the scripts in the "Additional information" section to verify and record the number of databases, users, schemas, tables, views, and user-defined functions (UDFs) in your source Amazon Redshift cluster.| DBA @@ -102 +102 @@ Task| Description| Skills required -Generate Amazon Redshift DDL scripts. | Generate Data Definition Language (DDL) scripts by using the links from the “SQL statements to query Amazon Redshift” section in the “Additional information” section. These DDL scripts should include the “create user,” “create schema,” “privileges on schema to user,” “create table/view,” “privileges on objects to user,” and “create function” queries.| DBA +Generate Amazon Redshift DDL scripts. | Generate Data Definition Language (DDL) scripts by using the links from the "SQL statements to query Amazon Redshift" section in the "Additional information" section. These DDL scripts should include the "create user," "create schema," "privileges on schema to user," "create table/view," "privileges on objects to user," and "create function" queries.| DBA @@ -105 +105 @@ Unload source Amazon Redshift cluster data to the S3 bucket.| Run the UNLOAD com -Transfer source Region S3 bucket data to target Region S3 bucket.| Transfer the data from your source Region S3 bucket to the target S3 bucket. Because the “$ aws s3 sync” command cannot be used, make sure you use the process outlined in the “Transferring Amazon S3 data from AWS Regions to AWS Regions in China” article in the “Related resources” section.| Developer +Transfer source Region S3 bucket data to target Region S3 bucket.| Transfer the data from your source Region S3 bucket to the target S3 bucket. Because the "$ aws s3 sync" command cannot be used, make sure you use the process outlined in the "Transferring Amazon S3 data from AWS Regions to AWS Regions in China" article in the "Related resources" section.| Developer