All checks
Medium Redshift · regional

Redshift cluster subnet groups should have subnets from multiple Availability Zones

Verifies that Redshift cluster subnet groups contain subnets from at least two Availability Zones.

service
Redshift
severity
Medium
scope
evaluated in every region

How to fix it

Add subnets from at least two Availability Zones to the cluster subnet group. The call replaces the whole subnet list, so pass the existing subnet IDs along with the new one, and every subnet in one group must share the same network ACL rules and route table routes. If Redshift.18 is open on a cluster using this group, add three zones now, because Multi-AZ needs three.

In the console

Redshift → Provisioned clusters dashboard → Configurations → Subnet groups → the subnet group → Edit

With the AWS CLI

aws redshift modify-cluster-subnet-group --cluster-subnet-group-name <subnet-group-name> --subnet-ids <subnet-id-1> <subnet-id-2> <subnet-id-3> --region <region>

With Terraform

resource "aws_redshift_subnet_group" "this" {
  name       = var.subnet_group_name
  subnet_ids = var.subnet_ids
}

See which of your accounts this check is failing on.

Book a demo