customergauge/redshift

Redshift Connector for Laravel with AWS Secret Manager

1.2.1 2025-07-07 11:50 UTC

This package is auto-updated.

Last update: 2025-07-07 11:51:19 UTC


README

This library provides a custom database driver for Laravel to connect seamlessly with Amazon Redshift. It allows proper integration with Redshift’s PostgreSQL-compatible interface, with support for custom connection behaviors and optional AWS Secrets Manager integration.

Inspiration

This library was inspired on Laravel Aurora Connector

🚀 Installation

composer require customergauge/redshift

⚙️ Usage

In your config/database.php, define a connection using the redshift driver:

'redshift' => [
    'driver' => 'redshift',
    'host' => env('REDSHIFT_HOST'),
    'port' => env('REDSHIFT_PORT', 5439),
    'database' => env('REDSHIFT_DATABASE'),
    'username' => env('REDSHIFT_USERNAME'),
    'password' => env('REDSHIFT_PASSWORD'),
    'charset' => 'utf8',
    'prefix' => '',
    'schema' => 'public',
    'options' => [],
    'redshift' => [
        'secret' => env('AWS_REDSHIFT_SECRET'), // optional
        'temporary_credential' => [] // optional: IAM-based temporary auth
    ],
],

You can optionally configure a secret name for AWS AWS Secrets Manager via redshift.secret to securely fetch the database credentials.

Alternatively, if your application runs with sufficient IAM permissions, you can use temporary credentials to connect to Redshift. To enable this, set the temporary_credential option in the redshift config:

'temporary_credential' => [
    'workgroupName' => 'your-redshift-workgroup-name', // mandatory to work
    // You may also pass any valid parameters supported by AWS Redshift Serverless getCredentials API
],

When this option is enabled, the application will connect to Amazon Redshift using short-lived credentials obtained via AWS IAM authentication, improving security by avoiding static passwords and enabling fine-grained access control.

This requires your application (e.g. ECS task, Lambda, EC2, etc.) to assume an IAM role with permission to call redshift-serverless:GetCredentials

🌍 AWS Configuration

Make sure you define your AWS region in config/aws.php, especially if using Secrets Manager:

return [
    'region' => env('AWS_REGION', 'eu-west-1'),
    // other AWS services config
];

📦 Secrets Manager Support

This package can integrate with AWS Secrets Manager to load your Redshift credentials at runtime.

To improve performance, we recommend using the AWS Secrets Manager Caching Extension.

🧪 Example Query

Once configured, you can use Eloquent or Query Builder as usual:

DB::connection('redshift')->table('events')->select('user_id')->limit(10)->get();

🤝 Contributing

We welcome contributions! Feel free to open issues, suggest improvements, or submit PRs.

📝 License

Laravel Redshift Connector is licensed under the MIT License.