Overview

The Redshift integration connects Datadog to your Amazon Redshift cluster to sync metadata, query history, and table-level metrics. Use it to monitor data freshness, detect anomalies, and trace lineage across your warehouse and downstream tools.

Datadog supports both provisioned Redshift clusters and Redshift Serverless workgroups.

Prerequisites

Before you begin, make sure you have:

• A Redshift superuser or database user with the ability to create roles and grant privileges.
• If your Redshift cluster or workgroup restricts network access by IP, add Datadog webhook IPs to your VPC security group inbound rules. For the list of IPs, see the webhooks section of the IP ranges list.

Set up your account in Redshift

Connect to your Redshift cluster as a superuser and run the following SQL to create a dedicated role for Datadog.

1. Create a role and grant access to system catalog views.

   -- Create a dedicated role for Datadog monitoring
   CREATE ROLE datadog_role;
   
   -- Required for table size metrics
   GRANT SELECT ON svv_table_info TO ROLE datadog_role;
   

2. Grant read-only access to your data.

   Run the following for each schema you want Datadog to monitor:

   GRANT USAGE ON SCHEMA "<YOUR_SCHEMA>" TO ROLE datadog_role;
   GRANT SELECT ON ALL TABLES IN SCHEMA "<YOUR_SCHEMA>" TO ROLE datadog_role;
   ALTER DEFAULT PRIVILEGES IN SCHEMA "<YOUR_SCHEMA>"
     GRANT SELECT ON TABLES TO ROLE datadog_role;
   

   To generate grant statements for all schemas at once, run:

   SELECT
       'GRANT USAGE ON SCHEMA "' || schema_name || '" TO ROLE datadog_role;' || '\n' ||
       'GRANT SELECT ON ALL TABLES IN SCHEMA "' || schema_name || '" TO ROLE datadog_role;' || '\n' ||
       'ALTER DEFAULT PRIVILEGES IN SCHEMA "' || schema_name || '" GRANT SELECT ON TABLES TO ROLE datadog_role;'
         AS grant_statement
   FROM svv_all_schemas
   WHERE schema_name NOT IN ('information_schema', 'pg_catalog', 'pg_internal', 'catalog_history');
   

   Copy and run the output to apply grants to all schemas.

3. Create or assign the Datadog database user.

-- Replace <STRONG_PASSWORD> with a secure password
CREATE USER datadog_user PASSWORD '<STRONG_PASSWORD>' SYSLOG ACCESS UNRESTRICTED;
GRANT ROLE datadog_role TO datadog_user;

GRANT ROLE datadog_role TO "IAMR:<YOUR_IAM_ROLE_NAME>";
ALTER USER "IAMR:<YOUR_IAM_ROLE_NAME>" SYSLOG ACCESS UNRESTRICTED;

Configure IAM policies

Add the following policies to the Datadog AWS integration IAM role associated with the AWS account that contains your Redshift cluster.

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": "redshift:GetClusterCredentials",
            "Resource": [
                "arn:aws:redshift:<REGION>:<ACCOUNT_ID>:dbuser:<CLUSTER_IDENTIFIER>/datadog_user"
            ]
        }
    ]
}

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": "redshift-serverless:GetCredentials",
            "Resource": "arn:aws:redshift-serverless:<REGION>:<ACCOUNT_ID>:workgroup/<WORKGROUP_ID>"
        }
    ]
}

Configure the Redshift integration in Datadog

To configure the Redshift integration in Datadog:

1. Navigate to Datadog Data Observability > Settings.

2. Click the Configure button for the Redshift option.

3. Select a connected AWS account or add a new AWS account.

4. Enter your cluster connection details:

5. Click Add account.

Next steps

After you save, Datadog begins syncing your information schema and query history in the background. Initial syncs can take up to several hours depending on the size of your Redshift deployment.

After the initial sync completes, create a Data Observability monitor to start alerting on freshness, column-level metrics, and custom SQL metrics.

Further reading

Additional helpful documentation, links, and articles:

Data Observability OverviewDOCUMENTATION Data Observability MonitorsDOCUMENTATION