AWS redshift: Redshift COPY columnar: link title updates, CREDENTIALS link removed
Summary
Renames the linked Redshift Spectrum enhanced VPC routing doc title to 'Querying data lake tables with enhanced VPC routing' in two places and removes the CREDENTIALS parameter link from the considerations list. No substantive change to the IAM/presigned URL guidance itself.
Security assessment
The only content change beyond a link-title rename is the deletion of a CREDENTIALS parameter cross-reference; the surrounding IAM policy and presigned URL (s3:signatureAge) guidance is unchanged, so this is editorial rather than a security fix or new security guidance.
Evidence
- * [CREDENTIALS](./copy-parameters-authorization.html#copy-credentials)
Diff
diff --git a/redshift/latest/dg/copy-usage_notes-copy-from-columnar.md b/redshift/latest/dg/copy-usage_notes-copy-from-columnar.md index 735380d2d..6e1ae2963 100644 --- a//redshift/latest/dg/copy-usage_notes-copy-from-columnar.md +++ b//redshift/latest/dg/copy-usage_notes-copy-from-columnar.md @@ -26 +26 @@ COPY supports columnar formatted data with the following considerations: - * To access your Amazon S3 data through a VPC endpoint, set up access using IAM policies and IAM roles as described in [Using Amazon Redshift Spectrum with Enhanced VPC Routing](https://docs.aws.amazon.com/redshift/latest/mgmt/spectrum-enhanced-vpc.html) in the _Amazon Redshift Management Guide_. + * To access your Amazon S3 data through a VPC endpoint, set up access using IAM policies and IAM roles as described in [Querying data lake tables with enhanced VPC routing](https://docs.aws.amazon.com/redshift/latest/mgmt/spectrum-enhanced-vpc.html) in the _Amazon Redshift Management Guide_. @@ -40,2 +39,0 @@ COPY supports columnar formatted data with the following considerations: - * [CREDENTIALS](./copy-parameters-authorization.html#copy-credentials) - @@ -62 +60 @@ COPY supports columnar formatted data with the following considerations: - * COPY from the Parquet and ORC file formats uses Redshift Spectrum and the bucket access. To use COPY for these formats, be sure there are no IAM policies blocking the use of Amazon S3 presigned URLs. The presigned URLs generated by Amazon Redshift are valid for 1 hour so that Amazon Redshift has enough time to load all the files from the Amazon S3 bucket. A unique presigned URL is generated for each file scanned by COPY from columnar data formats. For bucket policies that include an `s3:signatureAge` action, make sure to set the value to at least 3,600,000 milliseconds. For more information, see [Using Amazon Redshift Spectrum with enhanced VPC routing](https://docs.aws.amazon.com/redshift/latest/mgmt/spectrum-enhanced-vpc.html). + * COPY from the Parquet and ORC file formats uses Redshift Spectrum and the bucket access. To use COPY for these formats, be sure there are no IAM policies blocking the use of Amazon S3 presigned URLs. The presigned URLs generated by Amazon Redshift are valid for 1 hour so that Amazon Redshift has enough time to load all the files from the Amazon S3 bucket. A unique presigned URL is generated for each file scanned by COPY from columnar data formats. For bucket policies that include an `s3:signatureAge` action, make sure to set the value to at least 3,600,000 milliseconds. For more information, see [Querying data lake tables with enhanced VPC routing](https://docs.aws.amazon.com/redshift/latest/mgmt/spectrum-enhanced-vpc.html).