How to load data from AWS CloudTrail to Redshift
Learn how to use Airbyte to synchronize your AWS CloudTrail data into Redshift within minutes.
Building your pipeline or Using Airbyte
Airbyte is the only open source solution empowering data teams to meet all their growing custom business demands in the new AI era.
Building in-house pipelines
- Inconsistent and inaccurate data
- Laborious and expensive
- Brittle and inflexible
After Airbyte
- Reliable and accurate
- Extensible and scalable for all your needs
- Deployed and governed your way
Start syncing with Airbyte in 3 easy steps within 10 minutes
Take a virtual tour
Demo video of Airbyte Cloud
Demo video of AI Connector Builder
Setup Complexities simplified!
Simple & Easy to use Interface
Airbyte is built to get out of your way. Our clean, modern interface walks you through setup, so you can go from zero to sync in minutes—without deep technical expertise.
Guided Tour: Assisting you in building connections
Whether you’re setting up your first connection or managing complex syncs, Airbyte’s UI and documentation help you move with confidence. No guesswork. Just clarity.
Airbyte AI Assistant that will act as your sidekick in building your data pipelines in Minutes
Airbyte’s built-in assistant helps you choose sources, set destinations, and configure syncs quickly. It’s like having a data engineer on call—without the overhead.
What sets Airbyte Apart
Modern GenAI Workflows
Streamline AI workflows with Airbyte: load unstructured data into vector stores like Pinecone, Weaviate, and Milvus. Supports RAG transformations with LangChain chunking and embeddings from OpenAI, Cohere, etc., all in one operation.
Move Large Volumes, Fast
Quickly get up and running with a 5-minute setup that enables both incremental and full refreshes for databases of any size, seamlessly scaling to handle large data volumes. Our optimized architecture overcomes performance bottlenecks, ensuring efficient data synchronization even as your datasets grow from gigabytes to petabytes.
An Extensible Open-Source Standard
More than 1,000 developers contribute to Airbyte’s connectors, different interfaces (UI, API, Terraform Provider, Python Library), and integrations with the rest of the stack. Airbyte’s AI Connector Builder lets you edit or add new connectors in minutes.
Full Control & Security
Airbyte secures your data with cloud-hosted, self-hosted or hybrid deployment options. Single Sign-On (SSO) and Role-Based Access Control (RBAC) ensure only authorized users have access with the right permissions. Airbyte acts as a HIPAA conduit and supports compliance with CCPA, GDPR, and SOC2.
Fully Featured & Integrated
Airbyte automates schema evolution for seamless data flow, and utilizes efficient Change Data Capture (CDC) for real-time updates. Select only the columns you need, and leverage our dbt integration for powerful data transformations.
Enterprise Support with SLAs
Airbyte Self-Managed Enterprise comes with dedicated support and guaranteed service level agreements (SLAs), ensuring that your data movement infrastructure remains reliable and performant, and expert assistance is available when needed.
What our users say
Raman Singh
Predictable, straightforward pricing model that simplified budgeting and significantly reduced overall spend
Chase Zieman
“Airbyte helped us accelerate our progress by years, compared to our competitors. We don’t need to worry about connectors and focus on creating value for our users instead of building infrastructure. That’s priceless. The time and energy saved allows us to disrupt and grow faster.”
Rupak Patel
"With Airbyte, we could just push a few buttons, allow API access, and bring all the data into Google BigQuery. By blending all the different marketing data sources, we can gain valuable insights."
How to Sync to Manually
Step 1: Set Up CloudTrail Logging
Begin by creating a new CloudTrail trail or use an existing one. Ensure that the trail is configured to deliver log files to an S3 bucket. This is crucial as it allows you to access the logs needed for analysis. Go to the AWS Management Console, navigate to CloudTrail, and follow the steps to set up or edit a trail, specifying the target S3 bucket for log delivery.
Step 2: Configure S3 Bucket for CloudTrail Logs
Make sure the S3 bucket specified for CloudTrail logs has the correct permissions. The bucket should allow CloudTrail to write logs into it. Go to the S3 console, and under your bucket's permissions tab, confirm that the bucket policy allows `s3:PutObject` permission from the CloudTrail service.
Step 3: Set Up AWS Lambda Function for Data Processing
Create a Lambda function to parse and transform CloudTrail data into a format suitable for Redshift. Use the AWS Lambda console to create a new function, selecting the appropriate runtime (e.g., Python or Node.js). This function will be triggered by S3 events (when new logs are added to the bucket) and will process the logs, preparing them for Redshift ingestion.
Step 4: Create an IAM Role for Lambda Execution
Develop an IAM role with the necessary permissions for your Lambda function. This role should have policies that allow reading from the S3 bucket where CloudTrail logs are stored and writing to another S3 bucket (or the same one) where processed data will be stored. Attach the `AWSLambdaBasicExecutionRole` managed policy to this role for basic Lambda execution permissions.
Step 5: Process and Store Transformed Data in S3
Modify your Lambda function to transform the CloudTrail logs into a CSV or JSON format suitable for Redshift. Once transformed, store these files in an S3 bucket. Ensure your Lambda function is configured to trigger on new log file uploads and that it outputs the transformed data files back to the S3 bucket.
Step 6: Create an Amazon Redshift Cluster
If you do not have an Amazon Redshift cluster set up, create one using the Amazon Redshift console. When configuring your cluster, ensure it has the necessary compute resources and is located in the same region as your S3 bucket to minimize data transfer costs. Note the connection details (endpoint, database name, and port) for use in the next step.
Step 7: Load Data from S3 to Redshift
Use the COPY command in Redshift to load data from your S3 bucket. Connect to your Redshift cluster using a SQL client, and execute the COPY command, specifying the S3 path to your transformed data files. Ensure your Redshift cluster has the necessary IAM roles attached to access the S3 bucket. For example:
```sql
COPY my_table
FROM 's3://my-transformed-data-bucket/path/'
IAM_ROLE 'arn:aws:iam::account-id:role/MyRedshiftRole'
FORMAT AS CSV;
```
Adjust the format and options in the COPY command according to the data format used (CSV, JSON, etc.).
Following these steps will enable you to move data from AWS CloudTrail to Amazon Redshift without the need for third-party connectors or integrations.