# Enable Redshift imports

{% hint style="danger" %}
**This documentation is for the CARTO Self-Hosted Legacy Version**. Use only if you've installed this specific version. Explore our latest documentation for updated features.
{% endhint %}

To import data into Redshift through CARTO Self-Hosted, follow these step-by-step instructions.

{% hint style="danger" %}
This requires access to an AWS account and an existing accessible Redshift endpoint.
{% endhint %}

1. **Create an AWS IAM user with programmatic access**. Take note of the user's ARN, Key ID and Key secret.
2. **Create an AWS S3 Bucket**:
   * ACLs should be allowed.
   * If server-side encryption is enabled, the user must be granted with permissions over the KMS key following the [AWS documentation](https://repost.aws/knowledge-center/s3-bucket-access-default-encryption).
3. **Create an AWS IAM role with the following settings**:

   1. Trusted entity type: `Custom trust policy`.
   2. Custom trust policy: Make sure to replace `<your_aws_user_arn>`.

   ```json
   {
     "Version": "2012-10-17",
     "Statement": [
         {
             "Effect": "Allow",
             "Principal": {
                 "AWS": "<your_aws_user_arn>"
             },
             "Action": [
                 "sts:AssumeRole",
                 "sts:TagSession"
             ]
         }
     ]
   }
   ```

   3. Add permissions: Create a new permissions' policy, replacing `<your_aws_s3_bucket_name>`.

   ```json
   {
      "Version": "2012-10-17",
      "Statement": [
          {
              "Effect": "Allow",
              "Action": "s3:ListBucket",
              "Resource": "arn:aws:s3:::<your_aws_s3_bucket_name>"
          },
          {
              "Effect": "Allow",
              "Action": "s3:*Object",
              "Resource": "arn:aws:s3:::<your_aws_s3_bucket_name>/*"
          }
      ]
   }
   ```
4. **Configure your CARTO Self-Hosted deployment**:\\

   Add the following lines to your <mark style="color:orange;">customer.env</mark> file:

   ```
   IMPORT_AWS_CUSTOM_BUCKET_ROLE_ARN='<AWS_CUSTOM_ROLE_ARN>'
   IMPORT_AWS_ACCESS_KEY_ID='<AWS_ACCESS_KEY_ID>'
   IMPORT_AWS_SECRET_ACCESS_KEY='<AWS_ACCESS_KEY_SECRET>'
   ```
5. **Update your installation to apply the changes**.
6. **Configure Redshift Integration in CARTO:**
   1. Log into your CARTO Self-Hosted, go to `Data Explorer > Connections > Add new connection` and create a new Redshift connection.
   2. Then go to `Settings > Advanced > Integrations > Redshift > New`, introduce your S3 Bucket name and region and copy the policy generated.
   3. From the AWS console, go to your `S3 > Bucket > Permissions > Bucket policy` and paste the policy obtained in the previous step in the policy editor.
   4. Go back to the CARTO Self-Hosted (Redshift integration page) and check the `I have already added the S3 bucket policy` box and click on the `Validate and save button`.
   5. Go to `Data Exporer > Import data > Redshift connection` and you should be able to import a local dataset to Redshift.
7. **Import Data to Redshift:**
   1. Go to Data Explorer > Import data > Redshift connection. Now, you should be able to [import a local dataset to Redshift](https://docs.carto.com/carto-user-manual/data-explorer/importing-data)! :tada: