<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Installation on</title><link>https://docs.protegrity.com/cloud-protect/4.0.0/docs/aws/redshift/installation/</link><description>Recent content in Installation on</description><generator>Hugo</generator><language>en</language><atom:link href="https://docs.protegrity.com/cloud-protect/4.0.0/docs/aws/redshift/installation/index.xml" rel="self" type="application/rss+xml"/><item><title>Prerequisites</title><link>https://docs.protegrity.com/cloud-protect/4.0.0/docs/aws/redshift/installation/prerequisite/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://docs.protegrity.com/cloud-protect/4.0.0/docs/aws/redshift/installation/prerequisite/</guid><description>&lt;ol id="toc">&lt;/ol>
&lt;script>
 // JavaScript to generate the table of contents from H2 headings
 document.addEventListener("DOMContentLoaded", function () {
 //get all h2 headings within the 'main' element and generate a toc with links to them
 //excluding h2 heading 'Feedback' if it exists
 const toc = document.getElementById("toc");
 const headings = document.querySelectorAll("main h2");
 headings.forEach(heading => {
 if (heading.textContent === "Feedback") {
 return; // Skip the 'Feedback' heading
 }

 const li = document.createElement("li");
 const a = document.createElement("a");
 const id = heading.textContent.toLowerCase().replace(/\s+/g, '-');
 heading.id = id; // Set the id for the heading
 a.href = `#${id}`;
 a.textContent = heading.textContent;
 li.appendChild(a);
 toc.appendChild(li);
 });

 });
&lt;/script>



&lt;p>

 




	






 






 &lt;h2 id="aws-services">AWS Services&lt;/h2>
&lt;p>The following table describes the AWS services that may be a part of your Protegrity installation.&lt;/p></description></item><item><title>Pre-Configuration</title><link>https://docs.protegrity.com/cloud-protect/4.0.0/docs/aws/redshift/installation/preconfiguration/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://docs.protegrity.com/cloud-protect/4.0.0/docs/aws/redshift/installation/preconfiguration/</guid><description>&lt;ol id="toc">&lt;/ol>
&lt;script>
 // JavaScript to generate the table of contents from H2 headings
 document.addEventListener("DOMContentLoaded", function () {
 //get all h2 headings within the 'main' element and generate a toc with links to them
 //excluding h2 heading 'Feedback' if it exists
 const toc = document.getElementById("toc");
 const headings = document.querySelectorAll("main h2");
 headings.forEach(heading => {
 if (heading.textContent === "Feedback") {
 return; // Skip the 'Feedback' heading
 }

 const li = document.createElement("li");
 const a = document.createElement("a");
 const id = heading.textContent.toLowerCase().replace(/\s+/g, '-');
 heading.id = id; // Set the id for the heading
 a.href = `#${id}`;
 a.textContent = heading.textContent;
 li.appendChild(a);
 toc.appendChild(li);
 });

 });
&lt;/script>



&lt;p>

 




	






 






 &lt;h2 id="provide-aws-sub-account">Provide AWS sub-account&lt;/h2>
&lt;p>Identify or create an AWS account where the Protegrity solution will be installed.
It is recommended that a new AWS sub-account be created.
This can provide greater security controls and help avoid conflicts with other applications that might impact regional account limits.
An individual with the Cloud Administrator role will be required for some subsequent installation steps.&lt;/p></description></item><item><title>Protect Service Installation</title><link>https://docs.protegrity.com/cloud-protect/4.0.0/docs/aws/redshift/installation/protector/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://docs.protegrity.com/cloud-protect/4.0.0/docs/aws/redshift/installation/protector/</guid><description>&lt;p>

 




	






 






 &lt;ol id="toc">&lt;/ol>
&lt;script>
 // JavaScript to generate the table of contents from H2 headings
 document.addEventListener("DOMContentLoaded", function () {
 //get all h2 headings within the 'main' element and generate a toc with links to them
 //excluding h2 heading 'Feedback' if it exists
 const toc = document.getElementById("toc");
 const headings = document.querySelectorAll("main h2");
 headings.forEach(heading => {
 if (heading.textContent === "Feedback") {
 return; // Skip the 'Feedback' heading
 }

 const li = document.createElement("li");
 const a = document.createElement("a");
 const id = heading.textContent.toLowerCase().replace(/\s+/g, '-');
 heading.id = id; // Set the id for the heading
 a.href = `#${id}`;
 a.textContent = heading.textContent;
 li.appendChild(a);
 toc.appendChild(li);
 });

 });
&lt;/script>





 




	






 






 &lt;h2 id="preparation">Preparation&lt;/h2>
&lt;ol>
&lt;li>
&lt;p>Ensure that all the steps in &lt;a href="https://docs.protegrity.com/cloud-protect/4.0.0/docs/aws/redshift/installation/preconfiguration/">Pre-Configuration&lt;/a> are performed.&lt;/p></description></item><item><title/><link>https://docs.protegrity.com/cloud-protect/4.0.0/docs/aws/redshift/installation/prerequisites/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://docs.protegrity.com/cloud-protect/4.0.0/docs/aws/redshift/installation/prerequisites/</guid><description>&lt;h2 id="prerequisites">Prerequisites&lt;/h2>
&lt;table>
 &lt;thead>
 &lt;tr>
 &lt;th>Requirements&lt;/th>
 &lt;th>Description&lt;/th>
 &lt;/tr>
 &lt;/thead>
 &lt;tbody>
 &lt;tr>
 &lt;td>&lt;strong>Protegrity distribution and installation scripts&lt;/strong>&lt;/td>
 &lt;td>These artifacts are provided by Protegrity&lt;/td>
 &lt;/tr>
 &lt;tr>
 &lt;td>&lt;strong>Protegrity ESA 10.0+&lt;/strong>&lt;/td>
 &lt;td>The Cloud VPC must be able to obtain network access to the ESA&lt;/td>
 &lt;/tr>
 &lt;tr>
 &lt;td>&lt;strong>AWS Account&lt;/strong>&lt;/td>
 &lt;td>Recommend creating a new sub-account for Protegrity Serverless&lt;/td>
 &lt;/tr>
 &lt;tr>
 &lt;td>&lt;strong>Redshift cluster (Enterprise Edition)&lt;/strong>&lt;/td>
 &lt;td>Must be in the same region as Protegrity Protect Lambda&lt;/td>
 &lt;/tr>
 &lt;/tbody>
&lt;/table></description></item><item><title/><link>https://docs.protegrity.com/cloud-protect/4.0.0/docs/aws/redshift/installation/services/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://docs.protegrity.com/cloud-protect/4.0.0/docs/aws/redshift/installation/services/</guid><description>&lt;h2 id="aws-services">AWS Services&lt;/h2>
&lt;p>The following table describes the AWS services that may be a part of your Protegrity installation.&lt;/p>
&lt;table>&lt;thead>&lt;tr>&lt;th>
&lt;p>Service&lt;/p>
&lt;/th>&lt;th>
&lt;p>Description&lt;/p>
&lt;/th>&lt;/tr>&lt;/thead>&lt;tbody>&lt;tr>&lt;td>
&lt;p>&lt;strong>Lambda&lt;/strong>&lt;/p>
&lt;/td>&lt;td>
&lt;p>Provides serverless compute for Protegrity protection operations and the ESA integration to fetch policy updates or deliver audit logs.&lt;/p>
&lt;/td>&lt;/tr>&lt;tr>&lt;td>
&lt;p>&lt;strong>KMS&lt;/strong>&lt;/p>
&lt;/td>&lt;td>
&lt;p>Provides secrets for envelope policy encryption/decryption for Protegrity.&lt;/p>
&lt;/td>&lt;/tr>&lt;tr>&lt;td>
&lt;p>&lt;strong>Secrets Manager&lt;/strong>&lt;/p>
&lt;/td>&lt;td>
&lt;p>Provides secrets management for the ESA credentials.&lt;/p>
&lt;/td>&lt;/tr>&lt;tr>&lt;td>
&lt;p>&lt;strong>S3&lt;/strong>&lt;/p>
&lt;/td>&lt;td>
&lt;p>Intermediate storage location for the encrypted ESA policy layer.&lt;/p></description></item><item><title/><link>https://docs.protegrity.com/cloud-protect/4.0.0/docs/aws/redshift/installation/skills/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://docs.protegrity.com/cloud-protect/4.0.0/docs/aws/redshift/installation/skills/</guid><description>&lt;h2 id="required-skills-and-abilities">Required Skills and Abilities&lt;/h2>
&lt;table>
 &lt;thead>
 &lt;tr>
 &lt;th>Requirements&lt;/th>
 &lt;th>Description&lt;/th>
 &lt;/tr>
 &lt;/thead>
 &lt;tbody>
 &lt;tr>
 &lt;td>&lt;strong>AWS Account Administrator&lt;/strong>&lt;/td>
 &lt;td>To run CloudFormation (or perform steps manually), create/configure a VPC and IAM permissions.&lt;/td>
 &lt;/tr>
 &lt;tr>
 &lt;td>&lt;strong>Protegrity Administrator&lt;/strong>&lt;/td>
 &lt;td>The ESA credentials required to extract the policy for the Policy Agent&lt;/td>
 &lt;/tr>
 &lt;tr>
 &lt;td>&lt;strong>Redshift Administrator&lt;/strong>&lt;/td>
 &lt;td>Account Admin access required to setup access&lt;/td>
 &lt;/tr>
 &lt;tr>
 &lt;td>&lt;strong>Network Administrator&lt;/strong>&lt;/td>
 &lt;td>To open firewall to access ESA and evaluate AWS network setup&lt;/td>
 &lt;/tr>
 &lt;/tbody>
&lt;/table></description></item></channel></rss>