Connect Postgres

Canvas requires the following fields to connect to your PostgreSQL instance:

1. Host
2. Port
3. Database
4. Username and Password

Host

The public address of your Postgres instance. If you block public access to your database you will need to whitelist the following IP addresses in your database's security group:

• 44.224.89.3
• 35.80.194.138
• 44.241.79.133

Port

Also available in the AWS console. This is 5432 by default.

Database

The database that you would like to work with in Canvas.

Username and Password

To display your data, Canvas requires a user with usage grants on any schemas you want to access and select grants on any tables and views you want to access. Following the principle of least privilege, we recommend creating a user for Canvas with the minimum set of permission necessary. The following script will create a user and grant it permissions for the schema public:

CREATE USER 'canvas_user' PASSWORD 'your-strong-password';

// Grant access to schema "public". Repeat this for any other schemas you want to access
GRANT USAGE ON SCHEMA "public" TO canvas_user;
GRANT SELECT ON ALL TABLES IN SCHEMA "public" TO canvas_user;
// This grants access to all future tables
ALTER DEFAULT PRIVILEGES IN SCHEMA "public" GRANT SELECT ON TABLES TO canvas_user;

Using an SSH tunnel

Prerequisites

• The SSH tunnel host must be on the same network as your Postgres host.

Connecting using a tunnel

1. Enter the hostname, port, and username of the ssh tunnel you would like to use.
2. Copy the provided Public Key into the authorized_keys file in your SSH config for the username you provided.
   • Note: the provided Public Key is generated during setup, and is unique to every connection.
   • This means that if you have multiple SSH tunnels, you will have multiple public keys in your authorized_keys