{
  "MyRedshiftMasterUserPassword": {
    "value": "Abcd2019",
    "type": "SecureString"
  }
}

Resources
  Redshift:
    Type: 'AWS::Redshift::Cluster'
    Properties:
      NodeType: dc2.large
      NumberOfNodes: !Ref RedshiftNodes
      ClusterType: multi-node
      AutomatedSnapshotRetentionPeriod: !Ref AutomatedSnapshotRetentionPeriod
      DBName: datawarehouse_v1
      MasterUsername: !Ref RedshiftMasterUsername
      MasterUserPassword: '{{resolve:ssm-secure:MyRedshiftMasterUserPassword:1}}'

For clear text, the password must meet the following constraints:

    * It must be 8 to 64 characters in length.
    * It must contain at least one uppercase letter, one lowercase letter, and one number.
    * It can use any printable ASCII characters (ASCII code 33 to 126) except ' (single quote), " (double quote), :, , /, @, or space