{"type":"doc","content":[{"type":"paragraph","content":[{"text":"S3, Redshift, and Redshift Serverless storages can all be used as a storage layer for ","type":"text"},{"text":"SNP Glue™","type":"text","marks":[{"type":"link","attrs":{"href":"https://datavard.atlassian.net/wiki/spaces/DATAVARD/pages/666829160/Datavard+Glue"}}]},{"text":" or ","type":"text"},{"text":"SNP OutBoard™ ERP Archiving","type":"text","marks":[{"type":"link","attrs":{"href":"https://datavard.atlassian.net/wiki/spaces/DATAVARD/pages/1422524499/OutBoard+DataTiering+for+ERP"}}]},{"text":". ","type":"text"}]},{"type":"paragraph","content":[{"text":"Out of these, Redshift Serverless is offering the best price/performance for most use cases involving structured data. ","type":"text"}]},{"type":"paragraph","content":[{"text":"S3 provides inexpensive storage for landing zones, cold archive storage purposes, and unstructured data. ","type":"text"}]},{"type":"paragraph","content":[{"text":"Redshift with a dedicated cluster is useful for use cases with high, continuous loads.","type":"text"}]},{"type":"paragraph","content":[{"text":"It is recommended to deploy AWS resources in a way, that the development, test, and production environments are isolated. This means that when you archive or replicate data to S3, there should be one S3 bucket per SAP system. With Redshift deployment, a typical scenario would be one cluster with separate databases for development and quality environments, and one cluster for the production SAP environment.","type":"text"}]},{"type":"paragraph","content":[{"text":"While the setup itself is simple, from experience we see that the setup usually takes around two weeks since multiple teams need to be involved to fulfill the prerequisites (SAP Basis, Network, AWS).","type":"text"}]},{"type":"paragraph","content":[{"text":"The person responsible for the setup should have general knowledge of AWS S3 and AWS Redshift, SAP basis, and networking basics. You will need to deploy resources on AWS and create access credentials, import our transports to the SAP system, install JRE and JDBC drivers on SAP application servers, and make sure that SAP and AWS environments can communicate. ","type":"text"}]},{"type":"extension","attrs":{"layout":"default","extensionType":"com.atlassian.confluence.macro.core","extensionKey":"toc","parameters":{"macroParams":{"maxLevel":{"value":"2"}},"macroMetadata":{"macroId":{"value":"1fbf844e-24eb-47d7-bcb6-191790c253b9"},"schemaVersion":{"value":"1"},"title":"Table of Contents"}},"localId":"bb2b5b43-18c3-4647-969b-3ea6294abdba"}},{"type":"heading","attrs":{"level":1},"content":[{"text":"General Prerequisites","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"SAP NetWeaver release","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]},{"type":"paragraph","content":[{"text":"Storage management requires SAP NW 7.01 SP15 or higher.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#172b4d"}}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Open Ports","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]},{"type":"paragraph","content":[{"text":"In a controlled network environment, it is common to have firewall rules in place. To enable communication between SAP systems and AWS, outbound communication from the SAP system to the following ports on the AWS side needs to be allowed:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]},{"type":"table","attrs":{"layout":"default","width":1800.0,"localId":"1cdae937-1d29-4571-b7ec-4e12a621d670"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[40.7]},"content":[{"type":"paragraph","content":[{"text":"Port","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[77.63]},"content":[{"type":"paragraph","content":[{"text":"Type","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[127.26]},"content":[{"type":"paragraph","content":[{"text":"AWS service","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[40.7]},"content":[{"type":"paragraph","content":[{"text":"5439","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[77.63]},"content":[{"type":"paragraph","content":[{"text":"tcp","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[127.26]},"content":[{"type":"paragraph","content":[{"text":"Redshift","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[40.7]},"content":[{"type":"paragraph","content":[{"text":"80/443","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[77.63]},"content":[{"type":"paragraph","content":[{"text":"http/https","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[127.26]},"content":[{"type":"paragraph","content":[{"text":"S3","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]}]}]},{"type":"paragraph","content":[{"text":"Example of a simple telnet connectivity test:","type":"text"}]},{"type":"codeBlock","content":[{"text":"sapserver01:/ # telnet s3.eu-central-1.amazonaws.com 443\nTrying 3.5.139.101...\nConnected to s3.eu-central-1.amazonaws.com.\nEscape character is '^]'.\n^]\ntelnet> q\nConnection closed.","type":"text"}]},{"type":"paragraph","content":[{"text":"Storage Management allows encrypted communication through the public internet with S3 and Redshift, but for production deployment, it is recommended to have some kind of secure connectivity in place (VPN).","type":"text"}]},{"type":"paragraph","content":[{"text":"Refer to ","type":"text"},{"text":"AWS documentation","type":"text","marks":[{"type":"link","attrs":{"href":"https://docs.aws.amazon.com/AmazonS3/latest/userguide/inter-network-traffic-privacy.html"}}]},{"text":" for more details.","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Java connector","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]},{"type":"paragraph","content":[{"text":"Java connector is a critical middle-ware component used for both S3 and Redshift storage. Follow the steps from the chapter ","type":"text"},{"text":"Java Connector Setup","type":"text","marks":[{"type":"link","attrs":{"href":"/wiki/spaces/DATAVARD/pages/4638414685"}}]},{"text":" to set it up before you continue.","type":"text"}]},{"type":"mediaSingle","attrs":{"layout":"align-start","width":65.0},"content":[{"type":"media","attrs":{"width":944,"id":"c5f1f711-4062-4ed3-b0ae-109bc8127d6b","collection":"contentId-4638408893","type":"file","height":293}}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"S3","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]},{"type":"paragraph","content":[{"text":"This chapter describes the steps to establish a connection to S3 storage. ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]},{"type":"paragraph","content":[{"text":"S3 storage is usually used in the following scenarios:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Landing zone for raw SAP data from SNP Glue™","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Archiving storage for SNP OutBoard™ Data Tiering (SARA archives or tabular data when used as transparent binary storage)","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Intermediate storage used in combination with AWS Redshift","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"S3 Prerequisites","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"S3 bucket","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]},{"type":"paragraph","content":[{"text":"You must identify a suitable S3 bucket on AWS or manually ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":"create ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}},{"type":"link","attrs":{"href":"https://docs.aws.amazon.com/AmazonS3/latest/userguide/creating-bucket.html"}}]},{"text":"a new one in your AWS subscription based on your requirements. We recommend keeping public access disabled and enabling server-side encryption for added security. Storage management supports both SSE-S3 and SSE-KMS server-side data ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":"encryption options","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}},{"type":"link","attrs":{"href":"https://docs.aws.amazon.com/AmazonS3/latest/userguide/serv-side-encryption.html"}}]},{"text":".","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]},{"type":"paragraph","content":[{"text":"Note down your ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":"S3 region","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}},{"type":"em"}]},{"text":", ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":"bucket name,","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}},{"type":"em"}]},{"text":" and ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":"KMS key ID","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}},{"type":"em"}]},{"text":" (optional) as this information will be required during storage setup.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]},{"type":"paragraph","content":[{"text":"If you use ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":"Customer Managed Key, ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}},{"type":"em"}]},{"text":"make sure to update the ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":"Key Policy ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}},{"type":"em"}]},{"text":"to allow key use for the user/role (Principal) accessing the S3 bucket.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"AWS User for programmatic access","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]},{"type":"paragraph","content":[{"text":"We recommend creating a distinct user for every SAP system connected to the AWS services to isolate each system's data. Refer to ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"AWS documentation","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"link","attrs":{"href":"https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html"}}]},{"text":" for best security practices. ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]},{"type":"paragraph","content":[{"text":"A credentials pair needs to be generated ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"(","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":"access_key_id","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}},{"type":"strong"}]},{"text":", ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":"secret_key_id","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}},{"type":"strong"}]},{"text":"). Make sure to ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":"rotate access keys","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}},{"type":"link","attrs":{"href":"https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html#Using_RotateAccessKey"}}]},{"text":" regularly.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]},{"type":"paragraph","content":[{"text":"These credentials will be used in Storage Management for read/write access to the S3 bucket. If Redshift is used, it will also be used to load/unload data from the Redshift cluster.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]},{"type":"paragraph"},{"type":"panel","attrs":{"panelType":"warning"},"content":[{"type":"heading","attrs":{"level":3},"content":[{"text":"Root user","type":"text"}]},{"type":"paragraph","content":[{"text":"Never use the ","type":"text"},{"text":"root account","type":"text","marks":[{"type":"link","attrs":{"href":"https://docs.aws.amazon.com/IAM/latest/UserGuide/id_root-user.html"}}]},{"text":" to provide access to your AWS subscription. Instead, create separate technical users ","type":"text"},{"text":"for programmatic access ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"with minimal authorizations. In the case of AssumeRole, the root account won't work, and the root account can not assume any role (restriction from Amazon AWS).","type":"text"}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"S3 Policy","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]},{"type":"paragraph","content":[{"text":"Assign an appropriate policy to the technical user, so it can access the S3 bucket. Follow the policy of least privilege. ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]},{"type":"paragraph","content":[{"text":"For a standard bucket without custom encryption keys, the following policy is sufficient.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]},{"type":"heading","attrs":{"level":5},"content":[{"text":"Basic bucket policy","type":"text","marks":[{"type":"strong"}]}]},{"type":"codeBlock","content":[{"text":"{\n \"Version\": \"2012-10-17\",\n \"Statement\": [\n {\n \"Effect\": \"Allow\",\n \"Principal\": {\n \"AWS\": \"arn:aws:iam::MY-ACCOUNT-ID:user/MY-USER\"\n },\n \"Action\": [\n \"s3:GetObject\",\n \"s3:PutObject\",\n \"s3:DeleteObject\",\n \"s3:ListBucket\",\n \"s3:ListBucketMultipartUploads\",\n \"s3:ListMultipartUploadParts\",\n \"s3:AbortMultipartUpload\"\n ],\n \"Resource\": [\n \"arn:aws:s3:::MY-BUCKET/*\",\n \"arn:aws:s3:::MY-BUCKET\"\n ]\n }\n ]\n}","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"S3 Storage in Storage Management","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]},{"type":"paragraph","content":[{"text":"Storage Management facilitates transparent communication with different types of storages.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]},{"type":"paragraph","content":[{"text":"Create S3 storage through the transaction:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]},{"type":"paragraph","content":[{"text":"/DVD/SM_SETUP","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]},{"type":"mediaSingle","attrs":{"layout":"align-start"},"content":[{"type":"media","attrs":{"width":897,"id":"4ce9648c-a6d3-4263-9fbe-27dc13e16bae","collection":"contentId-4638408893","type":"file","height":727}}]},{"type":"paragraph","content":[{"text":"Entries explained:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Storage ID: ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":"Name of the storage","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Storage Type: ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":"Choose AWS_S3 for S3","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Description:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" Extended description of the storage for easier identification","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"AWS Bucket name:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" Name of the existing bucket in S3","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"AWS Region:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" Region where the bucket exists (the recommendation is that the Redshift cluster also exists in the same region)","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Path Prefix:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" Path to the landing area within the AWS bucket","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Custom endpoint:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" Optional parameter to specify the S3 VPC endpoint URL, for example: ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"https://sample-bucket.bucket.vpce-0a2509460a648e95d-x8m26cz5.s3.eu-central-1.vpce.amazonaws.com","type":"text","marks":[{"type":"link","attrs":{"href":"https://hrfacts-ldg-zsryuiqw.bucket.vpce-0a7309460a639e95d-x8m19cz5.s3.eu-central-1.vpce.amazonaws.com"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"AWS Credentials = None ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":"(option to choose for having ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"Access key","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" or ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"None ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":"credential type): Special case, when authentication against AWS services is performed by ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"default credentials provider chain","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"link","attrs":{"href":"https://docs.aws.amazon.com/sdk-for-java/v1/developer-guide/credentials.html"}}]},{"text":". So basically when the user sets this option to ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"None","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":", the Java Connector and its Amazon SDK are searching for AWS credentials on the hosting server. In the case of the scenario ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"Assume Role = Assume Role","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":", these credentials are needed to authenticate against the ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"AWS Security Token Service","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"link","attrs":{"href":"https://docs.aws.amazon.com/STS/latest/APIReference/welcome.html"}}]},{"text":". ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"AWS Credentials = Access key","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" (option to choose for having ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"Access key","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" or ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"None ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":"credential type)","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"AWS Access Key:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" Security information ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"access_key_id","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" - this option is required when ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"AWS Credentials","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" is set to ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"Access key","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"AWS Secret Key:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" Security information ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"secret_key_id","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" - this option is required when ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"AWS Credentials","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" is set to ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"Access key","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]}]}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Assume Role = None ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":"(option to choose from having ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"Assume Role","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" or ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"None","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" assume role type): Not using ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"any external AWS role","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" when accessing Amazon resources, the authenticated user uses its policies and attached permissions when accessing Amazon resource","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Assume Role = Assume Role ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" (option to choose from having ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"Assume Role","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" or ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"None ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":"assume role type):","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The special case is when an authenticated user tries to ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"lease/assume","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" an Amazon role and gets that role temporary credentials and user temporary credentials when accessing Amazon resources. The attached permissions to the assumed role are used to evaluate access rights on Amazon resources instead of users' permissions. More info can be found ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"here","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"link","attrs":{"href":"https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRole.html"}}]},{"text":". ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"RoleARN:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" Name of the assumed role in ARN format (example: ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"arn:aws:iam::683735966288:role/dvd_s3_read_role_to_be_assumed","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"em"}]},{"text":") - this option is required when ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"Assume Role","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" is ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"not","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" set to ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"None","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"ExternalID:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" E","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"xternal ID used to identify against the assumed role, the user has to set proper external ID to be able to successfully get temporary credentials from STS AssumeRole API, ","type":"text"},{"text":"more info","type":"text","marks":[{"type":"link","attrs":{"href":"https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-user_externalid.html"}}]},{"text":" - ","type":"text"},{"text":"this option is required when ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"Assume Role","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" is ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"not","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" set to ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"None","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"RoleSessionName: ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":"Identifier for the assumed role session, the role session name to uniquely identify a session when the same role is assumed by different principals or for different reasons, can be used for logging on Amazon - this option is required when ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"Assume Role","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" is ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"not","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" set to ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"None","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"AWS STS endpoint:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" Optional – URL of AWS STS endpoint, when specified regional ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"AWS STS endpoint is used instead of the global endpoint","type":"text","marks":[{"type":"textColor","attrs":{"color":"#16191f"}}]},{"text":" -","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":" more info","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"link","attrs":{"href":"https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"AWS STS region:","type":"text","marks":[{"type":"strong"}]},{"text":" M","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"andatory if the AWS STS endpoint is specified, Region related to the specified endpoint ","type":"text"}]}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Java connector RFC:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" TCP/IP RFC destination for communication with Java connector","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Java call Repeat:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" Number of times failed calls should be retried","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Repeat delay:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" Delay between retried calls","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"AWS KMS KeyID:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" Key ID of the key used to encrypt data on S3 (optional)","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Compute hash:","type":"text","marks":[{"type":"strong"}]},{"text":" Calculate the hash of data ","type":"text"},{"type":"hardBreak"}]}]}]},{"type":"paragraph","content":[{"text":"Complete the creation of the storage by confirming (F8).","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"Redshift","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]},{"type":"paragraph","content":[{"text":"AWS Redshift is ideal as an archive for frequently accessed tabular data for SNP OutBoard™ Data Tiering or as analytics storage for SNP Glue™.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Redshift prerequisites","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"S3 storage","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]},{"type":"paragraph","content":[{"text":"Redshift storage requires existing S3 storage to work. Make sure that you finished the steps in the S3 section and that you have working storage ready. ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Cluster and database","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]},{"type":"paragraph","content":[{"text":"You must ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":"create a Redshift cluster","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}},{"type":"link","attrs":{"href":"https://docs.aws.amazon.com/redshift/latest/gsg/rs-gsg-launch-sample-cluster.html"}}]},{"text":", which will host your Redshift database. The sizing highly depends on the use case and the amount of data that will be stored there, so use the ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":"Help me choose","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}},{"type":"strong"}]},{"text":" option on the cluster creation page to properly size the cluster.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]},{"type":"paragraph","content":[{"text":"It is highly recommended that it shares a region with your S3 bucket.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Redshift schema and database user","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]},{"type":"paragraph","content":[{"text":"Create a schema and a database user that Storage Management will use. ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]},{"type":"paragraph","content":[{"text":"There are two supported authentication options for Redshift:","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Using Redshift user and password","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Using IAM credentials","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"Using IAM is recommended for production workloads. ","type":"text"}]},{"type":"paragraph","content":[{"text":"In this example, the SID of the SAP system is DVQ and contains recommended naming conventions. Adjust the SQL statements to fit your environment. ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]},{"type":"codeBlock","attrs":{"language":"sql"},"content":[{"text":"--create user and schema\ncreate user datavard_dvq password 'my-difficult-password';\ncreate schema sapdvq;\nalter schema sapdvq owner to datavard_dvq; \n-- assign required permissions to system tables\ngrant select on pg_catalog.SVV_TABLE_INFO to datavard_dvq;\ngrant select on pg_catalog.PG_TABLE_DEF to datavard_dvq;","type":"text"}]},{"type":"paragraph","content":[{"text":"For accessing Redshift using IAM, the credentials used need to have ","type":"text"},{"text":"GetClusterCredentials","type":"text","marks":[{"type":"code"}]},{"text":" permission, besides standard Redshift authorizations.","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"JDBC Drivers ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.macro.core","extensionKey":"anchor","parameters":{"macroParams":{"":{"value":"JDBC-Drivers"},"legacyAnchorId":{"value":"id-(SM-2405)S3/RedshiftStorageSetup-JDBC-Drivers"}},"macroMetadata":{"macroId":{"value":"9dca9e7605b9550ce1f6703d7a63a4c7"},"schemaVersion":{"value":"1"},"title":"Anchor"}},"localId":"2ba9fe08-0bd5-4980-9dae-745660c7e6d8"}},{"type":"hardBreak"}]},{"type":"paragraph","content":[{"text":"JDBC protocol is used to connect to AWS Redshift. AWS ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"Redshift JDBC driver","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"link","attrs":{"href":"https://docs.aws.amazon.com/redshift/latest/mgmt/jdbc20-download-driver.html"}}]},{"text":" must be manually stored on the operating system and be accessible to the connector.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]},{"type":"paragraph","content":[{"text":"It is necessary to use the path which is available on all SAP application servers - ","type":"text"},{"text":"/sapmnt","type":"text","marks":[{"type":"code"}]},{"text":" filesystem is ideal for this purpose. Make sure that ","type":"text"},{"text":"adm:sapsys","type":"text","marks":[{"type":"em"}]},{"text":" is the owner of the directory and its contents.","type":"text"}]},{"type":"table","attrs":{"layout":"wide","width":1800.0,"localId":"a79a068a-d086-4901-8cd4-15ece331412a"},"content":[{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[959.0]},"content":[{"type":"paragraph","content":[{"text":"$ ls -ld /sapmnt/DVQ/global/security/dvd_conn/*","type":"text","marks":[{"type":"code"}]}]},{"type":"paragraph","content":[{"text":"drwxr-xr-x 2 dvqadm sapsys 4096 --- /sapmnt/DVQ/global/security/dvd_conn/redshift","type":"text","marks":[{"type":"code"}]}]},{"type":"paragraph","content":[{"text":"$ ls -l /sapmnt/DVQ/global/security/dvd_conn/aws","type":"text","marks":[{"type":"code"}]}]},{"type":"paragraph","content":[{"text":"drwxr-xr-x 2 dvqadm sapsys 4096 --- /sapmnt/DVQ/global/security/dvd_conn/redshift/RedshiftJDBC41-no-awssdk-1.2.16.1027.jar","type":"text","marks":[{"type":"code"}]}]}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Redshift storage in Storage Management","type":"text"}]},{"type":"paragraph","content":[{"text":"The AWS Redshift storage is created in a similar way to the process of setting up the S3 storage.","type":"text"}]},{"type":"paragraph","content":[{"text":"Open transaction ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"/DVD/SM_SETUP > Create > Enter Storage ID ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":"and","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":" Storage Type (Redshift)","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":".","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"em"}]}]},{"type":"paragraph","content":[{"text":" ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]},{"type":"mediaSingle","attrs":{"layout":"align-start","width":888,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":888,"alt":"image-20240301-092208.png","id":"16dc840c-17f2-426f-b7cb-38879468cd1d","collection":"contentId-4638408893","type":"file","height":530}}]},{"type":"mediaSingle","attrs":{"layout":"align-start","width":888,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":888,"alt":"image-20240112-123128.png","id":"bbeaeb87-8965-4c0f-94f8-924505fbcb5f","collection":"contentId-4638408893","type":"file","height":114}}]},{"type":"mediaSingle","attrs":{"layout":"align-start","width":886,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":886,"alt":"image-20240112-123223.png","id":"b5ee7cd0-376d-40d8-962b-dc07439765a3","collection":"contentId-4638408893","type":"file","height":194}}]},{"type":"paragraph","content":[{"text":"Entries explained:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Storage ID:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" Name of the storage","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Storage Type:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" Choose REDSHIFT storage type","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Description:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" Extended description of the storage for easier identification","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Referenced Storage:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" Defines which S3 storage will be used by Redshift","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Java connector RFC:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" RFC connection to Java connector","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Redshift host:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" Redshift server hosting the Redshift service","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Port:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" Port number on which Redshift service is accessible","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Database name:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" Name of DB in Redshift cluster","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Database schema:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" Name of the schema (usually public)","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Enable update:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" If checked, delta loads will be merged into existing data","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Use extended escaping:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" If checked, exotic newline characters in data are escaped","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Driver engine:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" Use Amazon Redshift","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Driver Classname:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" Classname of the driver used for loading, value ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"com.amazon.redshift.jdbc.Driver","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" can be commonly used. Classes contained in the driver file can be checked with command:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]},{"type":"codeBlock","content":[{"text":"unzip -l .jar | grep Driver.class","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Driver path:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" Logical name of the driver directory","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Connection pool size:","type":"text","marks":[{"type":"strong"}]},{"text":" Number of connections that can be kept open in the pool, reducing resource-expensive establishment of JDBC connections.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Authentication method:","type":"text","marks":[{"type":"strong"}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Username and password:","type":"text","marks":[{"type":"strong"}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Username:","type":"text","marks":[{"type":"strong"}]},{"text":" Redshift user created in the Redshift user group","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Password:","type":"text","marks":[{"type":"strong"}]},{"text":" Password for specified username","type":"text"}]}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"IAM Access and Secret keys: ","type":"text","marks":[{"type":"strong"},{"type":"link","attrs":{"href":"https://docs.aws.amazon.com/redshift/latest/mgmt/redshift-iam-authentication-access-control.html#security_iam_authentication"}}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Username:","type":"text","marks":[{"type":"strong"}]},{"text":" Database user to be used. If it does not exist and ","type":"text"},{"text":"AutoCreate","type":"text","marks":[{"type":"link","attrs":{"href":"https://docs.aws.amazon.com/redshift/latest/mgmt/jdbc-and-odbc-options-for-database-credentials.html"}}]},{"text":" is enabled, it does not need to exist prior.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"IAM Access key: ","type":"text","marks":[{"type":"strong"}]},{"text":"Access key for the IAM role or for IAM database authentication","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"IAM Secret key: ","type":"text","marks":[{"type":"strong"}]},{"text":"Secret key for the IAM role or for IAM database authentication","type":"text"}]}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"IAM profile:","type":"text","marks":[{"type":"strong"}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Username:","type":"text","marks":[{"type":"strong"}]},{"text":" Database user to be used. If it does not exist and ","type":"text"},{"text":"AutoCreate","type":"text","marks":[{"type":"link","attrs":{"href":"https://docs.aws.amazon.com/redshift/latest/mgmt/jdbc-and-odbc-options-for-database-credentials.html"}}]},{"text":" is enabled, it does not need to exist prior.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"IAM Access key: ","type":"text","marks":[{"type":"strong"}]},{"text":"Name of the ","type":"text"},{"text":"profile","type":"text","marks":[{"type":"link","attrs":{"href":"https://docs.aws.amazon.com/redshift/latest/mgmt/options-for-providing-iam-credentials.html#using-configuration-profile"}}]},{"text":" to be used. If left initial, the ","type":"text"},{"text":"default ","type":"text","marks":[{"type":"strong"}]},{"text":"profile is used.","type":"text"}]}]}]}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Login timeout (seconds):","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" Threshold for JDBC timeout","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Enable SSL:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" Checked if SSL authentication should be used","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"SSL Mode:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" There are two options for SSL mode:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"type":"hardBreak"},{"text":"verify-ca","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"em"}]},{"text":" (default option, verifies that the certificate comes from a trusted CA)","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"type":"hardBreak"},{"text":"verify-full","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"em"}]},{"text":" (both CA and hostname listed in the certificate are verified)","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]}]},{"type":"paragraph","content":[{"text":"Finish the creation of the storage by confirming (F8). If the SAP system can authenticate against AWS Redshift and receives the expected result of the SQL command ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"use database","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":", the creation of the storage is considered successful.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"Enabling Debug logging for AWS SDK","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]},{"type":"paragraph","content":[{"text":"As of JCO 235, you can enable ","type":"text"},{"text":"detailed logging","type":"text","marks":[{"type":"link","attrs":{"href":"https://docs.aws.amazon.com/sdk-for-java/v1/developer-guide/java-dg-logging.html"}}]},{"text":" for the S3 connector, which exposes SDK internals in the Glue Java log. This can be useful for troubleshooting purposes but shouldn't be used extensively as it's very verbose.","type":"text"}]},{"type":"paragraph","content":[{"text":"To enable the detailed logging:","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Start the Java connector","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Hit checkbox ","type":"text"},{"text":"Avoid JCO config files creation","type":"text","marks":[{"type":"code"}]},{"text":" ","type":"text","marks":[{"type":"em"}]},{"text":"in t-code ","type":"text"},{"text":"/DVD/JCO_MNG","type":"text","marks":[{"type":"code"}]},{"text":" -> ","type":"text"},{"text":"Advanced","type":"text","marks":[{"type":"code"}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Add AWS loggers config to ","type":"text"},{"text":"log4j.xml","type":"text","marks":[{"type":"code"}]},{"text":" ","type":"text","marks":[{"type":"em"}]},{"text":" section","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Restart JCO for changes to take effect.","type":"text"}]},{"type":"paragraph","content":[{"text":"Example config","type":"text","marks":[{"type":"strong"}]}]},{"type":"codeBlock","attrs":{"language":"xml"},"content":[{"text":"\n...\n\n \n \n","type":"text"}]},{"type":"paragraph"}]}]},{"type":"paragraph","content":[{"text":"To clean up after debugging, you can Uncheck the ","type":"text"},{"text":"Avoid JCO config files creation","type":"text","marks":[{"type":"code"}]},{"text":" ","type":"text","marks":[{"type":"em"}]},{"text":"and Restart the JCO","type":"text"}]},{"type":"paragraph","content":[{"type":"hardBreak"}]}],"version":1}

Browser not supported