30 actions in the dsql service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.
Grants permission to add a peer cluster to a multi-Region cluster
Grants permission to create new clusters
Grants permission to create a Change Stream for a cluster
Grants permission to connect to the database
Grants permission to connect to the database with admin role. Connecting with any other role requires DbConnect permission
Grants permission to delete a cluster and all of its data
Grants permission to remove the inline resource-based policy attached to a cluster
Grants permission to delete a Change Stream
Grants permission to get the status of an Aurora DSQL cluster backup job
Grants permission to get information about a cluster
Grants permission to retrieve the inline resource-based policy attached to a cluster
Grants permission to get the status of an Aurora DSQL cluster restore job
Grants permission to get information about a Change Stream
Grants permission to retrieve the VPC endpoint service name for a cluster
Grants permission to inject errors in targeted clusters
Grants permission to retrieve a list of clusters
Grants permission to retrieve a list of Change Streams for a cluster
Grants permission to list all tags on an Aurora DSQL resource
Grants permission to attach or update the inline resource-based policy attached to a cluster
Grants permission to update multi-Region properties of a cluster
Grants permission to configure and update the witness Region of a multi-Region cluster
Grants permission to remove a peer cluster from a multi-Region cluster
Grants permission to start a backup job for an Aurora DSQL cluster
Grants permission to start a restore job for an Aurora DSQL cluster
Grants permission to stop a backup job for an Aurora DSQL cluster
Grants permission to stop a restore job for an Aurora DSQL Cluster
Grants permission to add tags to Aurora DSQL resources
Grants permission to remove tags from Aurora DSQL resources
Grants permission to modify cluster attributes
Grants permission to modify Change Stream attributes