How can we export Redshift logs to our SIEM with least-privilege scopes?

Question

Sharon Kumari · Accepted Answer

To export Redshift logs to our SIEM with least-privilege scopes, you should enable Redshift audit logging to S3 or CloudWatch. Create an IAM role with minimal permissions (e.g., s3:PutObject or logs:PutLogEvents) scoped to the target bucket or log group. Use Lambda or Firehose to forward logs to your SIEM.

Sharon Kumari
Dec 19, 2025

0 0