Add alternatives to SSH Tunneling FAQ

Author: pmbasco

src/connections/storage/catalog/redshift/index.md

@@ -147,14 +147,16 @@ You can also unload data to a s3 bucket and then load the data into another Reds
 
 Segment does not currently support SSH tunneling to Redshift. You can usually allow Segment's ETL to write to Redshift without leaving the cluster available to other connections by using IP level restrictions.
 
-### Do you support Redshift Serverless?
-
-Segment does not currently support Serverless Redshift. While you can set up the connection in the Segment app, Segment does not have the functionality to query Redshift's SYS tables.
-
 Despite the fact Segment needs a public IP address to access your remote instance, Segment supports several layers of Redshift's security model:
 
 Security group — This is the firewall that Segment asks customers to open a pinhole in for Segment's IP address. Security groups are a fundamental building block of AWS security.
 
 SSL — This secures data in transit and also allows client apps like Segment to validate that the warehouse at the other end is actually a warehouse owned by AWS. This is especially important if your Redshift warehouse is not within the us-west-2 region.
 
 Username /password — This is the basic method used to authenticate database users and apply varying levels of permissions like who can create tables, who can delete data, who can see which tables, etc.
+
+### Do you support Redshift Serverless?
+
+Segment does not currently support Serverless Redshift. While you can set up the connection in the Segment app, Segment does not have the functionality to query Redshift's SYS tables.
+
+