Implementing row-level security
Amazon Redshift using RBAC supports row-level security (RLS) (https://docs.aws.amazon.com/redshift/latest/dg/t_rls.html) for granular access control over sensitive data, letting you specify which users or roles can access specific records. RLS policies defined at the table level restrict access to particular rows, complementing column-level security. Enforcing RLS policies on tables limits the result sets returned to users based on the policy expressions. As a user with the necessary permissions, such as a superuser and the sys:secadmin role, you can create, modify, or manage all row-level security policies for tables. Multiple RLS policies can be attached to objects, roles, or users. Depending on the RLS CONJUNCTION TYPE setting for the table, Amazon Redshift applies all the policies defined for a user using either AND or OR syntax.
Getting ready
To complete this recipe, you will need:
- An Amazon Redshift data warehouse deployed in...
