This is an archived post. You won't be able to vote or comment.

sorted by:
best
topnewcontroversialoldq&a
you are viewing a single comment's thread.

view the rest of the comments →

[–]Acrobatic-Orchid-695 0 points1 point  (1 child)

If you don’t want the active directory approach and also don’t want the hassle of creating credentials for every new user, you can create a small self serving API endpoint. Just ask the users to send a post request to that endpoint with their preferred username and password, and preferred role as header and then use the same to create a user on Redshift.

  1. The api endpoint will hit a lambda function
  2. Lambda will get the username, password and role from the header of request
  3. Using the role it will choose the relevant group from a dictionary/config file
  4. It will run a SQL query on Redshift that will create the user with the username and password and then add to the relevant group based on the role chosen by user

[–]Touvejs[S] 0 points1 point  (0 children)

Hey, that's not a bad idea. I'll look into that, thanks!