Castled enables you to leverage the customer 360 data in your Redshift to engage your customers across different channels like Email, SMS, Push and In-app notifications.

​
Permission Details

Create a dedicated user CASTLED for connecting to your Redshift warehouse.For making sure the connection is established successfully the CASTLED user created should have the below permissions:

  1. Required grants to create a new schema CASTLED with all required privileges to create/update/delete tables with in that schema.
  2. READ ONLY access to the existing as well as future tables and views in the schemas from which you want Castled to sync the data to your destination app.
  3. Permission to execute the existing as well as future functions in the schema from which you want Castled to sync the data to your destination app. You can use the below script to configure the required access required by Castled.
-----------------------------------USER CREATON STARTS-------------------------------------------------------
— Create a new user CASTLED for connecting to redshift DB
CREATE USER CASTLED WITH PASSWORD '<strong, unique password>';
-----------------------------------USER CREATON ENDS----------------------------------------------------------


-----------------------------------BOOK KEEPING SCHEMA ACCESS STARTS------------------------------------------
-- Create a private bookkeeping schema for storing sync data
CREATE SCHEMA CASTLED;

-- Give the CASTLED user full access to the bookkeeping schema
GRANT ALL ON SCHEMA CASTLED TO CASTLED;

-- Give CASTLED user access to all objects existing n the bookkeeping schema
GRANT ALL PRIVILEGES ON ALL TABLES IN SCHEMA CASTLED TO CASTLED;
-----------------------------------BOOK KEEPING SCHEMA ACCESS ENDS---------------------------------------------

Replace the < your schema> with your applicable schema for the below scripts before executing them

-----------------------------------GRANT TABLE READ ONLY ACCESS STARTS------------------------------------------
-- Give access to CASTLED user to SEE your schema
GRANT USAGE ON SCHEMA "<your schema>" TO CASTLED;

-- Give READ ONLY access to  CASTLED user to read from all existing tables in your schema
GRANT SELECT ON ALL TABLES IN SCHEMA "<your schema>" TO CASTLED;

-- Give READ ONLY access to CASTLED user to read from all the future tables being created in your schema
ALTER DEFAULT PRIVILEGES IN SCHEMA "<your schema>" GRANT SELECT ON TABLES TO CASTLED;

-- Give access to  the CASTLED user to execute any existing functions in you schema
GRANT EXECUTE ON ALL FUNCTIONS IN SCHEMA "<your schema>" TO CASTLED;

-- Give access to  the CASTLED user to execute any new functions added to this schema
ALTER DEFAULT PRIVILEGES IN SCHEMA "<your schema>" GRANT EXECUTE ON FUNCTIONS TO CASTLED;
-----------------------------------GRANT TABLE READ ONLY ACCESS ENDS---------------------------------------------

​
Connector Details

For configuring a new connector for Redshift the following fields needs to be captured:

  • Name: A name to uniquely qualify the warehouse source created
  • Database Server Host: Host’s IP address or DNS Name.
  • Database Server Port: The port on which your Amazon Redshift server is listening for connections. Default value: 5439.
  • Database name: Name of database you created for your cluster
  • Database User: Database username
  • Database Password: Database password
  • Enable SSH Tunnel: Enable this option to connect Redshift database host to Castled Data using a SSH Tunnel.This is done to provide an additional level of security and avoid exposing the Redshift setup to the public.
    • On enabling this option, you will have to enter the below details.Please refer Connecting through SSH Tunnel for more details
      • SSH Host
      • SSH Port
      • SSH User

If the sync involves more than one schema in your database GRANT mentioned above needs to be given for each of those schemas. If the views in your schema references tables of another schema in your database, GRANT needs to be given for those schemas as well.

​
Whitelisting Castled IP Address

Castled connects to Redshift using the ip address 34.205.244.96. Please make sure this ip is allowed inbound traffic to the Redshift port.

​
Connecting to SSH Tunnel

Castled uses SSH Tunelling to connect to Redshift clusters accessible only on private or internal networks. In order to make sure the connection is established successfully with SSH Tunneling, you need to provide an SSH Host visible on the public internet which can also connect to the private Redshift warehouse. The basic admin actions mentioned below are required for the same

While configuring a new warehouse connector for Redshift on the ‘Create Connector’, you need to enter the following details

  1. SSH Host IP/DNS Name
  2. SSH Port : Default is 22 unless changed
  3. SSH Username : User created for Castled on the SSH Host Docusaurus Refer Connecting through SSH Tunnel for details on how to add the castled public key to authorized_keys.

Refer Connecting through SSH Tunnel for details on how to add the castled public key to authorized_keys.