- Redirect client connections to the new cluster endpoint
- Uniquely identify the Redshift cluster
- Encrypt Redshift data in transit
- Back up Redshift data to S3