Redshift - Paradime

Amazon Redshift is a cloud data warehouse for storing and querying your data. Connect it to Paradime to run dbt™ from the Code IDE, deploy production jobs with Bolt, and let the DinoAI background agent work against your warehouse.

IP restrictionsAllow traffic from one of the Paradime IPs in your firewall, depending on the data location selected.See also: Paradime IP addresses.

Connection environments

Paradime connects to Redshift separately for each environment. You configure one connection per environment in Workspace Settings > Environments.

Environment	Used by	Typical target	Authentication methods
Code IDE	Running dbt™ from the terminal in the Code IDE	`dev`	Username and password, IAM
Bolt	Production jobs run by Bolt	`prod`	Username and password
Agent	Background agent sessions	`dinoai`	Username and password

The connection fields are the same across environments. What differs is the Redshift permissions you grant: the Code IDE connection typically reuses a developer’s access, while the Bolt and Agent environments should each use a dedicated service user with the minimum permissions required.

Suggested permissions

Bolt
Agent

We recommend creating a new Redshift user and granting the suggested access required to create tables and views in your production database. Run the script below in Redshift as an Account Admin. This set of permissions lets Paradime read from and create tables and views when running production jobs in your Redshift database.

-- create group
create group transformer;

-- create user and assign to group
create user paradime_prod_user
    password '<generate_password>'
    in group transformer;

-- grant privileges to the user group
grant select on all tables in schema information_schema to group transformer;
grant select on all tables in schema pg_catalog to group transformer;

-- for each schema:
grant usage on schema <schema_name> to group transformer;
grant select on all tables in schema <schema_name> to group transformer;

-- grant privileges to user group to create in database
grant create on database <your_database> to group transformer;

In Redshift, after each dbt™ run in production you need to make sure the correct privileges are granted, as Redshift does not support grant on future schemas. The paradime_prod_user should be able to read new schemas created in your production runs. Check this guide on using grants and hooks.

We recommend creating a dedicated Redshift service user for the Agent environment, with the minimum permissions required to create tables and views in your database. Run the script below in Redshift as an Account Admin. This set of permissions lets DinoAI read from and create tables and views during background agent sessions in your Redshift database.

-- create group
create group transformer;

-- create user and assign to group
create user paradime_dinoai_user
    password '<generate_password>'
    in group transformer;

-- grant privileges to the user group
grant select on all tables in schema information_schema to group transformer;
grant select on all tables in schema pg_catalog to group transformer;

-- for each schema:
grant usage on schema <schema_name> to group transformer;
grant select on all tables in schema <schema_name> to group transformer;

-- grant privileges to user group to create in database
grant create on database <your_database> to group transformer;

In Redshift, after each DinoAI background agent session you need to ensure the correct privileges are granted, as Redshift does not support grant on future schemas. The paradime_dinoai_user should be able to read new schemas created during agent sessions. Check this guide on using grants and hooks.

Add a connection

Click Settings in the top menu bar of the Paradime interface to access Workspace Settings.
In the left sidebar, click Environments.
Click Add New next to the section for the environment you are configuring:
- Code IDE for the Code IDE connection
- Bolt for the Bolt connection
- Agent for the Agent connection
Select Redshift and choose an authentication method.

Authentication methods

Username and password

Connect with a Redshift username and password. Available in all environments.

IAM

Connect using an IAM profile configuration. Code IDE only.

Optional connection attributes

Set additional profiles.yml attributes for this connection.

AWS PrivateLink

Connect privately over an AWS VPC endpoint.

​Connection environments

​Suggested permissions

​Add a connection

​Authentication methods

Username and password

IAM

​Related

Optional connection attributes

AWS PrivateLink

Connection environments

Suggested permissions

Add a connection

Authentication methods

Related