aws-redshift-alpha: add functionality for default IAM role

[sean-beath]

Describe the feature

Allow users to define a default IAM role for the cluster being created.

Use Case

I'm always frustrated when I need to deploy my cluster and then go through the console to add a default IAM role on the cluster.

Proposed Solution

Have a post-deployment Lambda that uses boto3 to define the role as being the default role.
Example code of how this could be implemented:

       import sys
            import os
            import json
            import cfnresponse
            import logging
            from pip._internal import main

            main(['install', 'boto3', '--target', '/tmp/'])
            sys.path.insert(0,'/tmp/')

            import boto3
            from botocore.exceptions import ClientError

            def lambda_handler(event, context):

                print(boto3.__version__)

                if event['RequestType'] == 'Delete':
                    cfnresponse.send(event, context, cfnresponse.SUCCESS, {'Data': 'Delete complete'})
                else:
                    try:
                        client = boto3.client('redshift')
                        response = client.modify_cluster_iam_roles(
                            ClusterIdentifier=os.environ['RedshiftClusterIdentifier'],
                            DefaultIamRoleArn=os.environ['RedshiftClusterRole']
                        )
                        print(response)
                    except Exception as e:
                        logger.error(e)
                        cfnresponse.send(event, context, cfnresponse.FAILED, {'Data': 'Create failed'})

                cfnresponse.send(event, context, cfnresponse.SUCCESS, {'Data': 'Create complete'})

                return {
                    'statusCode': 200,
                    'body': json.dumps('Deployed Default Role')
                }

Other Information

There is currently no way to define a default role using CFN.

Acknowledgements

• I may be able to implement this feature request
• This feature might incur a breaking change

CDK version used

2.43.1

Environment details (OS name and version, etc.)

MacOS Monterey 12.5

[peterwoodworth]

You could create an AwsCustomResource in your stack to easily make the API call you need to.

I would recommend doing that for now. Reach out and create an issue on the CloudFormation coverage roadmap if you'd like to see this be done automatically through CFN without the need to use a custom resource

[github-actions]

⚠️COMMENT VISIBILITY WARNING⚠️

Comments on closed issues are hard for our team to see.
If you need more assistance, please either tag a team member or open a new issue that references this one.
If you wish to keep having a conversation with other community members under this issue feel free to do so.