Class CcRedshiftCluster

CloudKitect Redshift Cluster component.

Default Configuration

Removal Policy: Retain in Production

Default Alarms

1. Disk space alerts

   • Risk Level: High
   • Well Architected Pillar: Reliability

2. CPU Utilization alert

   • Risk Level: High
   • Well Architected Pillar: Reliability, Performance, Operational Excellence

3. Cluster health alert

   • Risk Level: High
   • Well Architected Pillar: Reliability

Note that the default alarm uses the CcAlarm construct, which sets up an alarm action to notify the SNS Topic AlarmEventsTopic by default.

Examples

Default Usage

 new CcRedshiftCluster(stack, 'RSCluster', {
           vpc: vpc,
           masterUser: {
               masterUsername: 'admin'
           }
       });
Copy

Custom Configuration

new CcRedshiftCluster(stack, 'RSCluster', {
           vpc: vpc,
           masterUser: {
               masterUsername: 'admin'
           },
           port: 5555
       });
Copy

Compliance

It addresses the following compliance requirements

1. Databases are protected from accidental deletion in production

   • Risk Level: Medium
   • Compliance: NIST4
   • Well Architected Pillar: Operational Excellence

2. Enable enhanced VPC routing

   • Risk Level: Medium
   • Compliance: NA
   • Well Architected Pillar: Security

3. Redshift Cluster Audit Logging Enabled

   • Risk Level: Medium
   • Compliance: PCI, HIPAA, GDPR, APRA, MAS, NIST4
   • Well Architected Pillar: Security

4. Redshift Cluster Default Port

   • Risk Level: Low
   • Compliance: PCI, APRA, NIST4
   • Well Architected Pillar: Security

5. Cluster Encrypted

   • Risk Level: High
   • Compliance: PCI, HIPAA, APRA, MAS, NIST4
   • Well Architected Pillar: Security

6. Cluster in VPC

   • Risk Level: Medium
   • Compliance: PCI, HIPAA, APRA, MAS, NIST4
   • Well Architected Pillar: Security

7. Redshift Cluster Publicly Accessible

   • Risk Level: High
   • Compliance: PCI, HIPAA, GDPR, APRA, MAS, NIST4
   • Well Architected Pillar: Security

8. Redshift Nodes Counts

   • Risk Level: Medium
   • Compliance: APRA, MAS
   • Well Architected Pillar: Reliability, Cost

9. Redshift Parameter Group Require SSL

   • Risk Level: Medium
   • Compliance: PCI, HIPAA, APRA, MAS, NIST4
   • Well Architected Pillar: Security

10. Alarms By Default

    • Risk Level: High
    • Compliance: NA
    • Well Architected Pillar: Operational Excellence