steampipe plugin install aws

Table: aws_redshift_parameter_group - Query Amazon Redshift Parameter Groups using SQL

Title: Amazon Redshift Parameter Groups

Description: Amazon Redshift Parameter Groups provide customizable parameters that control the behavior of all the databases that a cluster contains. They enable more granular control over the database setup by allowing the modification of system parameters. This flexibility can enhance database security, performance, and manageability.

Table Usage Guide

The aws_redshift_parameter_group table in Steampipe provides you with information about Parameter Groups within Amazon Redshift. This table allows you, as a DevOps engineer, to query Parameter Group-specific details, including parameter names, values, and whether they are modifiable. You can utilize this table to gather insights on Parameter Groups, such as understanding the configuration of Redshift clusters, optimizing database performance, and ensuring adherence to best practices. The schema outlines the various attributes of the Parameter Group for you, including the parameter group name, parameter apply status, and associated tags.

Examples

Basic info

Analyze the settings of your AWS Redshift parameter groups to understand their configurations and relationships. This can help in optimizing the performance and security of your Redshift databases.

select
name,
description,
family
from
aws_redshift_parameter_group;
select
name,
description,
family
from
aws_redshift_parameter_group;

List parameter groups that have the require_ssl parameter set to false

Determine the areas in which parameter groups are not requiring SSL. This is useful for identifying potential security vulnerabilities in your AWS Redshift Parameter Groups.

select
name,
p ->> 'ParameterName' as parameter_name,
p ->> 'ParameterValue' as parameter_value,
p ->> 'Description' as description,
p ->> 'Source' as source,
p ->> 'DataType' as data_type,
p ->> 'ApplyType' as apply_type,
p ->> 'IsModifiable' as is_modifiable,
p ->> 'AllowedValues' as allowed_values,
p ->> 'MinimumEngineVersion' as minimum_engine_version
from
aws_redshift_parameter_group,
jsonb_array_elements(parameters) as p
where
p ->> 'ParameterName' = 'require_ssl'
and p ->> 'ParameterValue' = 'false';
select
name,
json_extract(p.value, '$.ParameterName') as parameter_name,
json_extract(p.value, '$.ParameterValue') as parameter_value,
json_extract(p.value, '$.Description') as description,
json_extract(p.value, '$.Source') as source,
json_extract(p.value, '$.DataType') as data_type,
json_extract(p.value, '$.ApplyType') as apply_type,
json_extract(p.value, '$.IsModifiable') as is_modifiable,
json_extract(p.value, '$.AllowedValues') as allowed_values,
json_extract(p.value, '$.MinimumEngineVersion') as minimum_engine_version
from
aws_redshift_parameter_group,
json_each(parameters) as p
where
json_extract(p, '$.ParameterName') = 'require_ssl'
and json_extract(p.value, '$.ParameterValue') = 'false';

Schema for aws_redshift_parameter_group

NameTypeOperatorsDescription
_ctxjsonbSteampipe context in JSON form.
account_idtext=, !=, ~~, ~~*, !~~, !~~*The AWS Account ID in which the resource is located.
akasjsonbArray of globally unique identifier strings (also known as) for the resource.
descriptiontextThe description of the parameter group.
familytextThe name of the cluster parameter group family that this cluster parameter group is compatible with.
nametext=The name of the cluster parameter group.
parametersjsonbA list of Parameter instances. Each instance lists the parameters of one cluster parameter group.
partitiontextThe AWS partition in which the resource is located (aws, aws-cn, or aws-us-gov).
regiontextThe AWS Region in which the resource is located.
sp_connection_nametext=, !=, ~~, ~~*, !~~, !~~*Steampipe connection name.
sp_ctxjsonbSteampipe context in JSON form.
tagsjsonbA map of tags for the resource.
tags_srcjsonbA list of tags assigned to the parameter group.
titletextTitle of the resource.

Export

This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.

You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh script:

/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- aws

You can pass the configuration to the command with the --config argument:

steampipe_export_aws --config '<your_config>' aws_redshift_parameter_group