In Purview, what integration runtime options are available for scanning AWS S3 and AWS Redshift on Private connection ?

Question

In Purview, what integration runtime options are available for scanning AWS S3 and AWS Redshift on Private connection ?

Harn(Au) Thonglertwong 60

I was looking at this doc: https://learn.microsoft.com/en-us/purview/data-map-integration-runtime-choose?source=recommendations#supported-data-sources

It says that AWS S3 supports only Azure IR/AWS IR

, while AWS Redshift supports Azure IR/AWS IR and Kubernetes SHIR.

User's image

From what I understand, Azure IR means the auto-resolve IR (no setup required). But if I want the connection between Purview and AWS to be private, what are my options? and what is AWS IR, Can I use AWS IR as it will support both AWS Redshift and S3 ?

Also, in the table from the same doc, AWS IR isn’t mentioned at all, which is confusing.

User's image And if I want to use AWS IR, how do I set it up? I couldn’t find any documentation about it.

In conclusion, these are my questions

what is AWS IR ?, and where can I find the documentation on how to install it ?
what choice do I have to connect Purview to S3 if my connection need to be private?
what choice do i have to connect Purview to Redshift if my connection need to be private, can I use AWS IR instead of Kubernetes SHIR ?

Pratyush Vashistha 1,525 Reputation points Microsoft External Staff Moderator

2025-08-21T04:13:53.15+00:00

Hello Harn(Au) Thonglertwong!

Following up to see if you have a chance to check my previous response and help us with requested information to check and assist you further on this.

Please do a Upvote if the response provided is useful, so that you can help others in the community looking for remediation for similar issues.

Thanks

Pratyush
Pratyush Vashistha 1,525 Reputation points Microsoft External Staff Moderator

2025-08-22T10:17:42.45+00:00

Hello Harn(Au) Thonglertwong,

Following up to see if you have a chance to check my previous response and helped, do let me know if you have any further questions on this. Kindly "Accept as an Answer" if the response provided is useful, so that you can help others in the community looking for remediation for similar issues.

Thanks, and Hapy to Help!

Pratyush

Accepted answer

0 additional answers

Your answer

Pratyush Vashistha 1,525 Reputation points Microsoft External Staff Moderator

2025-08-21T04:13:53.15+00:00

Hello Harn(Au) Thonglertwong!

Following up to see if you have a chance to check my previous response and help us with requested information to check and assist you further on this.

Please do a Upvote if the response provided is useful, so that you can help others in the community looking for remediation for similar issues.

Thanks

Pratyush
Pratyush Vashistha 1,525 Reputation points Microsoft External Staff Moderator

2025-08-22T10:17:42.45+00:00

Hello Harn(Au) Thonglertwong,

Following up to see if you have a chance to check my previous response and helped, do let me know if you have any further questions on this. Kindly "Accept as an Answer" if the response provided is useful, so that you can help others in the community looking for remediation for similar issues.

Thanks, and Hapy to Help!

Pratyush

Answer 1

Pratyush Vashistha 1,525 Microsoft External Staff Moderator

Hello Harn(Au) Thonglertwong! Welcome to Microsoft QnA portal and thanks for posting your query here.

Following are the answers for your queries.

What is AWS IR? Is there documentation on how to install it?

AWS IR in Microsoft Purview refers to a fully managed integration runtime that runs in AWS, provisioned by Microsoft Purview for scanning AWS-native data sources. You do not set up or install AWS IR yourself—it is automatically managed and provisioned by Microsoft internally when you configure supported AWS sources in Purview.

As it is already mentioned in the Documentation you have read**:** The article "Choose the right integration runtime configuration for your scenario" (see Types of integration runtimes) states:

“The AWS integration runtime is a fully managed and elastic compute hosted by Microsoft Purview in AWS. It's applicable when scanning Amazon data sources like S3, RDS.”

So, you cannot install or deploy AWS IR on your own infrastructure. There is no downloadable package or manual deployment for AWS IR.

If AWS IR is available for your scenario, it appears as an option in the data source configuration in the Purview portal.

How can I connect Purview to AWS S3 privately?

According to the "Supported data sources" table, AWS S3 is supported only using Azure IR or AWS IR—neither of which supports creating a private, VPC-bound connection to S3 from your own network.

Azure IR and AWS IR are both managed by Microsoft; they scan S3 with public endpoints—private S3 access (such as via VPC Endpoints/gateways or over private networks) is not supported at this time.

As of now, you cannot use SHIR or Kubernetes SHIR to connect to S3 for private scanning in Microsoft Purview.

Reference: Choose the right integration runtime – Supported Data Sources Table

What choice do I have to connect Purview to Redshift privately? Can I use AWS IR instead of Kubernetes SHIR?

For Amazon Redshift, the supported IRs are:
- Azure IR
- AWS IR
- Kubernetes supported SHIR (Self-Hosted Integration Runtime on Kubernetes)

If you need a private connection to Redshift where the scanning happens within your VPC (for example, using a VPC endpoint or private subnet), you must use Kubernetes supported SHIR. This IR can be deployed by you, within your own AWS VPC, so it can access Redshift privately.

AWS IR and Azure IR only support public endpoint access for Redshift. They do not support scanning Amazon Redshift over a private network/VPC.

You cannot use AWS IR for private Redshift access, only for scanning public Redshift clusters.

References:

Choose the right integration runtime – Supported Data Sources Table

Kubernetes supported SHIR - Learn how to install and configurePlease do a Upvote if the response provided is useful, so that you can help others in the community looking for remediation for similar issues.

Thanks

Pratyush

Harn(Au) Thonglertwong 60 Reputation points

2025-08-21T09:39:30.2966667+00:00

Hi @Pratyush Vashistha ,

Thank you kindly for your response.

I’m still a bit unclear about your statement:

"If AWS IR is available for your scenario, it appears as an option in the data source configuration in the Purview portal."

Since I have never seen the AWS IR option in my Purview portal when I'm scanning AWS Redshift, may I confirm whether this means that whenever I scan AWS using AzureAutoResolvedIR, Purview is automatically using AWS IR on my behalf?
Pratyush Vashistha 1,525 Reputation points Microsoft External Staff Moderator

2025-08-21T10:10:47.0933333+00:00
Hello Harn(Au) Thonglertwong,

Thanks for your prompt response.

Yes, You are correct here, The AWS IR is not something you explicitly select or see in the Purview portal.

When you configure a supported AWS data source (such as Amazon Redshift or S3) in the Purview portal and choose the AzureAutoResolveIntegrationRuntime (also known as Azure IR or “AutoResolveIR”), Microsoft’s platform will provision and route to the appropriate integration runtime automatically. This includes spinning up compute inside AWS (AWS IR), when needed, to run the scan more efficiently and securely.

So, when scanning supported AWS sources, you may see only “AzureIR” or “AutoResolveIntegrationRuntime” in the UI, but Purview is transparently handling the creation and management of the AWS IR in the background. You don’t manually deploy, see, or manage AWS IR.

This behavior is described in the official documentation here: Choose the right integration runtime

For further understanding please refer the following docs

Choose the right integration runtime configuration for your scenario – Microsoft Learn (Types of Integration Runtimes)

Supported data sources and IR mapping – Microsoft Learn

Please let me know if you have any other queries, I can help you with. Kindly upvote if I was able to clear the doubts of yours.

Thanks

Pratyush
Pratyush Vashistha 1,525 Reputation points Microsoft External Staff Moderator

2025-08-25T01:27:39.5033333+00:00

Hello Harn(Au) Thonglertwong,

Just checking to see if you have a chance to check my previous response and helped, do let me know if you have any further questions on this.

Please let me know if you have any other queries, I can help you with. Kindly Accept as an Answer if I was able to clear the doubts of yours.

Thanks

Pratyush
Pratyush Vashistha 1,525 Reputation points Microsoft External Staff Moderator

2025-08-26T03:14:58.71+00:00

Hello Harn(Au) Thonglertwong,

We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.

Thanks

Pratyush
Harn(Au) Thonglertwong 60 Reputation points

2025-08-26T07:21:23.76+00:00

Hi Pratyush, Thank you for your response. I understand now, and I appreciate your support. Please consider this topic closed.
Pratyush Vashistha 1,525 Reputation points Microsoft External Staff Moderator

2025-08-26T07:59:59.61+00:00

Thanks for your response Harn(Au) Thonglertwong and Happy learning!

Share via

In Purview, what integration runtime options are available for scanning AWS S3 and AWS Redshift on Private connection ?

0 additional answers

Your answer