Configuration and security
As Amazon Forecast is a separate fully managed service, you will need to create or modify your IAM role to include access permissions for your serverless endpoint or Redshift cluster. Additionally, you should configure a trust relationship for Amazon Forecast (forecast.amazonaws.com) in the IAM role to enable the necessary permissions.
You can use the AmazonForecastFullAccess managed policy, which grants full access to Amazon Forecast and all of the supported operations. You can attach this policy to your default role but, in your production environments, you must follow the principle of least-privilege permissions. You may use more restrictive permissions, such as the following:
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0...
