πŸš€ Built by opsZero!

May 6, 2026 Β· View on GitHub

Providers

NameVersion
aws>= 5.0
random>= 3.0

Inputs

NameDescriptionTypeDefaultRequired
admin_user_passwordThe password of the administrator for the first database created in the namespace.string""no
admin_usernameThe username of the administrator for the first database created in the namespace.string""no
amountThe limit amount. If time-based, this amount is in Redshift Processing Units (RPU) consumed per hour. If data-based, this amount is in terabytes (TB) of data transferred between Regions in cross-account sharing. The value must be a positive number.number60no
assume_role_policyPolicy that grants an entity permission to assume the role.anynullno
base_capacityThe base data warehouse capacity of the workgroup in Redshift Processing Units (RPUs).number28no
breach_actionThe action that Amazon Redshift Serverless takes when the limit is reached. Valid values are log, emit-metric, and deactivate. The default is log.string"log"no
config_parameterAn array of parameters to set for more control over a serverless database.list(any)[]no
createDetermines whether to create Redshift cluster and resources (affects all resources)booltrueno
create_random_passwordDetermines whether to create random password for cluster master_passwordbooltrueno
db_nameThe name of the first database created in the namespace.string""no
default_iam_role_arnThe Amazon Resource Name (ARN) for the IAM role that was set as default for the cluster when the cluster was createdstringnullno
endpoint_enableIf true, VPC endpoint is enabledbooltrueno
endpoint_nameThe Redshift-managed VPC endpoint namestring""no
enhanced_vpc_routingIf true, enhanced VPC routing is enabledboolnullno
iam_role_enabledIf true, iam role resource is enabledbooltrueno
iam_role_nameThe name of the iam rolestring""no
iam_rolesA list of IAM roles to associate with the namespace.list(any)[]no
kms_aliasThe display name of the alias. The name must start with the word 'alias' followed by a forward slash (alias/)string"alias/redshift-serverless"no
kms_enabledIf true, kms key is enabledbooltrueno
kms_key_idThe ARN of the Amazon Web Services Key Management Service key used to encrypt your data.string""no
log_exportsThe types of logs the namespace can export. Available export types are userlog, connectionlog, and useractivitylog.list(string)[]no
namespace_nameThe name of the namespace.string""no
periodThe time period that the amount applies to. A weekly period begins on Sunday. Valid values are daily, weekly, and monthly. The default is monthly.string"monthly"no
policyIf true, iam policy is enabledanynullno
policy_arnThe ARN of the policy you want to apply.string""no
policy_enabledWhether to Attach Iam policy with role.booltrueno
policy_nameThe name of the iam policy name.string""no
publicly_accessibleIf true, the cluster can be accessed from a public networkboolfalseno
random_password_lengthLength of random password to create. Defaults to 16number16no
retention_periodHow long to retain the created snapshot. Default value is -1.string"-1"no
secrets_manager_enabledIf true, secrets manages resource is enabledbooltrueno
secrets_manager_nameThe name of the secrets manager.string""no
security_group_idsAn array of security group IDs to associate with the workgroup.list(any)[]no
serverless_resource_policyIf true, serverless resource policy is enabledanynullno
snapshot_enableIf true, snapshot is enabledboolfalseno
snapshot_nameThe name of the snapshot.string""no
snapshot_policy_enableIf true, snapshot policy is enabledboolfalseno
subnet_idsAn array of VPC subnet IDs to use in the subnet grouplist(string)nullno
tagsA map of tags to add to all resourcesmap(string){}no
usage_typeThe type of Amazon Redshift Serverless usage to create a usage limit for. Valid values are serverless-compute or cross-region-datasharing.string"serverless-compute"no
workgroup_nameThe name of the workgroup.string""no

Resources

NameType
aws_iam_role.roleresource
aws_iam_role_policy.policyresource
aws_iam_role_policy_attachment.policy_attachmentresource
aws_kms_alias.aliasresource
aws_kms_key.kmsresource
aws_redshiftserverless_endpoint_access.endpointresource
aws_redshiftserverless_namespace.namespaceresource
aws_redshiftserverless_resource_policy.mainresource
aws_redshiftserverless_snapshot.snapshotresource
aws_redshiftserverless_usage_limit.usage_limitresource
aws_redshiftserverless_workgroup.workgroupresource
aws_secretsmanager_secret.secretresource
aws_secretsmanager_secret_version.secrets_versionresource
random_password.master_passwordresource

Outputs

NameDescription
endpoint_access_arnAmazon Resource Name (ARN) of the Redshift Serverless Endpoint Access.
endpoint_access_nameAmazon Resource Name (ARN) of the Redshift Serverless Endpoint Access.
limit_arnAmazon Resource Name (ARN) of the Redshift Serverless Usage Limit.
limit_idThe Redshift Usage Limit id.
namespace_arnThe Redshift Namespace ID.
namespace_idThe Redshift Namespace ID.
namespace_nameThe Redshift Namespace Name.
snapshot_accounts_with_restore_accessAll of the Amazon Web Services accounts that have access to restore a snapshot to a namespace.
snapshot_admin_usernameThe username of the database within a snapshot.
snapshot_arnThe Amazon Resource Name (ARN) of the namespace the snapshot was created from.
snapshot_nameThe name of the snapshot.
snapshot_namespace_arnThe Amazon Resource Name (ARN) of the namespace the snapshot was created from.
snapshot_owner_accountThe owner Amazon Web Services; account of the snapshot.
vpc_endpointThe VPC endpoint or the Redshift Serverless workgroup
workgroup_arnAmazon Resource Name (ARN) of the Redshift Serverless Workgroup.
workgroup_idThe Redshift Workgroup ID.
workgroup_nameThe Redshift Workgroup Name.

πŸš€ Built by opsZero!

opsZero provides software and consulting for DevOps. With our decade plus of experience scaling some of the world’s most innovative companies we have developed deep expertise in Kubernetes, DevOps, FinOps, and Compliance.

Our software and consulting solutions enable organizations to:

  • migrate workloads to the Cloud
  • setup compliance frameworks including SOC2, HIPAA, PCI-DSS, ITAR, FedRamp, CMMC, and more.
  • FinOps solutions to reduce the cost of running Cloud workloads
  • Kubernetes optimized for web scale and AI workloads
  • finding underutilized Cloud resources
  • setting up custom AI training and delivery
  • building data integrations and scrapers
  • modernizing onto modern ARM based processors

We do this with a high-touch support model where you:

  • Get access to us on Slack, Microsoft Teams or Email
  • Get 24/7 coverage of your infrastructure
  • Get an accelerated migration to Kubernetes

Please schedule a call if you need support.



AWS Advanced Tier AWS DevOps Competency AWS EKS Delivery AWS Public Sector