Tableau Cloud Help

This topic covers setup information specific to the data provider. For general information on setting up a private connection, see Cloud Admin: Set Up and Share a Private Connection.

• Set up Redshift in a private subnet: Creating a Redshift provisioned cluster or Amazon Redshift Serverless workgroup in a VPC(Link opens in a new window)
• Create and configure the endpoint service: Create a service powered by AWS PrivateLink(Link opens in a new window)

To get the IAM ARN that needs to be added as an allowed principal on the endpoint service in AWS:

1. Log in to Tableau Cloud Manager (TCM).
2. Go to Settings.
3. Select the Private Connect tab.
4. Expand IAM Regions and ARNs.
5. Find the shared region for your Tableau Cloud site and the data provider.
6. In the Actions menu (...), select Copy IAM ARN.

After you have copied Tableau Cloud's IAM ARN, allow it as an allowed principal on the endpoint service: Configure an endpoint service(Link opens in a new window)

Use the AWS Management Console or AWS CLI to get the endpoint service name needed for the Tableau Cloud Create Private Connection dialog.