-
Encryption key: Select the encryption key you created earlier.
-
Resource permissions: Add the following permissions to your secret to allow the Redis data pipeline to access your secret. Replace
<AWS ACCOUNT ID>with the AWS account ID for the Redis Cloud cluster that you saved earlier.
{
"Version" : "2012-10-17",
"Statement" : [ {
"Sid" : "RedisDataIntegrationRoleAccess",
"Effect" : "Allow",
"Principal" : "*",
"Action" : [ "secretsmanager:GetSecretValue", "secretsmanager:DescribeSecret" ],
"Resource" : "*",
"Condition" : {
"StringLike" : {
"aws:PrincipalArn" : "arn:aws:iam::<AWS ACCOUNT ID>:role/redis-data-pipeline-secrets-role"
}
}
} ]
}
After you store this secret, you can view and copy the Amazon Resource Name (ARN) of your secret on the secret details page. Save the secret ARN to use when you define your source database.