# Ensure Redshift Cluster Maintenance Settings Check

- Source: https://support.icompaas.com/support/solutions/articles/62000223751-ensure-redshift-cluster-maintenance-settings-check
- Section: [Solutions](https://support.icompaas.com/support/solutions) › [Security Controls](https://support.icompaas.com/support/solutions/62000065178) › [AWS Services](https://support.icompaas.com/support/solutions/folders/62000097507)
- Last updated: 2026-05-29
- Publisher: iCompaas, Inc. (https://www.icompaas.com)

### **Description:** 

Amazon Redshift is a data warehouse service. It is a collection of computing resources called nodes, organized into a cluster called a cluster that gives information about connections and user activities in your database. The logs are stored in Amazon S3 buckets.

### **Rationale:**

Amazon Redshift periodically performs maintenance to apply upgrades to your cluster. During these updates, your Amazon Redshift cluster isn't available for normal operations. Amazon Redshift assigns a 30-minute maintenance window at random from an 8-hour block of time per AWS Region, occurring on a random day of the week (Monday through Sunday, inclusive).

### **Impact:**

If a maintenance event is scheduled for a given week, it starts during the assigned 30-minute maintenance window. While Amazon Redshift is performing maintenance, it terminates any queries or other operations that are in progress.

### **Default Value:**

Amazon Redshift periodically performs maintenance Allow upgrade version is yes. 

### **Pre-requisites:**

A Cluster should be available.

  

**Remediation:**

### **Test Plan**

1.  Sign in to the Amazon Management Console
    
2.  Go to the Redshift dashboard at [https://console.aws.amazon.com/redshiftv2/](https://ap-south-1.console.aws.amazon.com/redshiftv2/ "https://ap-south-1.console.aws.amazon.com/redshiftv2/")
    
3.  Click on **Clusters**, In the left navigation pane
    
4.  Select the **Cluster**.![](https://support.icompaas.com/assets/kb/caf7732e76d94782.png)
    
5.   Select the **Maintenance Tab**, by default the maintenance, it will Allow the version upgrade ![](https://support.icompaas.com/assets/kb/4739bd846ccd8362.png)
    
6.  We can check the maintenance details when it takes a version upgrade ![](https://support.icompaas.com/assets/kb/cabf2227d00e486e.png)
    
7.  If you need to reschedule your cluster’s maintenance window. 
    

  

  

**Using AWS CLI:**

To know about the redshift cluster maintenance if the allow version is enabled it will show as true

aws redshift describe-clusters

  

### **Implementation steps:**

1.  Sign in to the Amazon Management Console
    
2.  Go to the Redshift dashboard at [https://console.aws.amazon.com/redshiftv2/](https://ap-south-1.console.aws.amazon.com/redshiftv2/ "https://ap-south-1.console.aws.amazon.com/redshiftv2/")
    
3.  Click on **Clusters**, In the left navigation pane
    
4.  Select the **Cluster**.![](https://support.icompaas.com/assets/kb/456885f57b848727.png)
    
5.   Select the **Maintenance Tab**, and click on Edit on the right side ![](https://support.icompaas.com/assets/kb/340c34e19b9bf827.png) 
    
6.  In the next window, change the date and time ![](https://support.icompaas.com/assets/kb/2e56d3d4951011c5.png) 
    

  

-   **Current** – Use the most current approved cluster version.
    
-   **Trailing** – Use the cluster version before the current version.
    
-   **Preview** – Use the cluster version that contains new features available for preview
    

  

7. Finally, click **Save Changes** ![](https://support.icompaas.com/assets/kb/65b348886606f148.png) 

  

**Using AWS CLI:**

To allow the version upgrade

aws redshift modify-cluster  
\--cluster-identifier <value>  
\--allow-version-upgrade

### **Backout plan:**

1.  Sign in to the Amazon Management Console
    
2.  Go to the Redshift dashboard at [https://console.aws.amazon.com/redshiftv2/](https://ap-south-1.console.aws.amazon.com/redshiftv2/ "https://ap-south-1.console.aws.amazon.com/redshiftv2/")
    
3.  Click on **Clusters**, In the left navigation pane 
    
4.  Select the **Cluster**.
    
5.  Select the **Maintenance Tab**, and click on Edit on the right side
    
6.  In the next window, change the date and time back to normal![](https://support.icompaas.com/assets/kb/cc93b9bcadb2e723.png)
    
7.  Finally, click **Save Changes**
    

  

**Using AWS CLI:**

**To disable the version upgrade** 

aws redshift modify-cluster  
\--cluster-identifier <value>  
\--no-allow-version-upgrade

### **References**:

-   [https://docs.aws.amazon.com/redshift/latest/mgmt/working-with-clusters.html#rs-mgmt-defer-maintenance](https://docs.aws.amazon.com/redshift/latest/mgmt/working-with-clusters.html#rs-mgmt-defer-maintenance "https://docs.aws.amazon.com/redshift/latest/mgmt/working-with-clusters.html#rs-mgmt-defer-maintenance")
    
-   [modify-cluster — AWS CLI 2.5.3 Command Reference](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/redshift/modify-cluster.html)

## Related compliance guidance

- [SOC 2 compliance: a practical implementation guide for cloud-native SaaS teams](https://support.icompaas.com/compliance/soc-2-trust-services-criteria): Configuration checks like this one are the technical half of a SOC 2 / ISO 27001 programme — the guide shows where they fit, what else an auditor expects, and how to evidence them.
- [ISO/IEC 27001:2022 compliance: a practical implementation guide](https://support.icompaas.com/compliance/iso-27001-2022): ISO 27001 Annex A.8 (technological controls) is where cloud hardening evidence lands; the guide shows how to run the ISMS around it.