title: How to unblock Kinesis Firehose CIDR/IP on Redshift Cluster in a VPC?
body: <p>We are trying to use AWS Kinesis Firehose with Redshift output. We have created the Firehose Delivery Stream. We have a Redshift Cluster in a VPC Security Group. 
  But it seems like Firehose is not able to connect to the cluster.</p>
  
  <p>This is a snippet where we create the VPC Security Group.</p>
  
  <pre><code>"RedshiftVPCSecurityGroup": {
    "Type": "AWS::EC2::SecurityGroup",
    "Properties": {
      "SecurityGroupIngress": [
        {
          "CidrIp": "52.19.239.192/27",
          "FromPort": "5439",
          "ToPort": "5439",
          "IpProtocol": "tcp"
        }
      ],
      "VpcId": {
        "Ref": "VpcId"
      },
      "GroupDescription": "Redshift VPC security group"
    }
  }
  </code></pre>
  
  <p>Following this <a href="http://docs.aws.amazon.com/firehose/latest/dev/controlling-access.html" rel="nofollow">link</a>, We set an Ingress rule that allows connections from "52.19.239.192/27". But this does not seem to have worked and we still get the following error. </p>
  
  <blockquote>
    <p>The connection to the specified Amazon Redshift cluster failed. Ensure that security settings allow Firehose connections, that the cluster or database specified in the Amazon Redshift destination configuration or JDBC URL is correct, and that the cluster is available.</p>
  </blockquote>
  
  <p>Does anyone know what are we doing wrong? </p>