elasticache:DecreaseNodeGroupsInGlobalReplicationGroup is a Write access-level action in the elasticache service. Grants permission to decrease the number of node groups in global replication groups
ARNs that elasticache:DecreaseNodeGroupsInGlobalReplicationGroup can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants elasticache:DecreaseNodeGroupsInGlobalReplicationGroup.
Filters access by the AtRestEncryptionEnabled parameter present in the request or default false value if parameter is not present
Filters access by the presence of non empty AuthToken parameter in the request
Filters access by the AutomaticFailoverEnabled parameter in the request
Filters access by the cacheNodeType parameter present in the request. This key can be used to restrict which cache node types can be used on cluster creation or scaling operations
Filters access by the CacheParameterGroupName parameter in the request
Filters access by the cluster mode parameter present in the request. Default value for single node group (shard) creations is false
Filters access by the engine type present in creation requests. For replication group creations, default engine 'redis' is used as key if parameter is not present
Filters access by the engineVersion parameter present in creation or cluster modification requests
Filters access by the Key ID of the KMS key
Filters access by the AZMode parameter, MultiAZEnabled parameter or the number of availability zones that the cluster or replication group can be placed in
Filters access by the NumNodeGroups or NodeGroupCount parameter specified in the request. This key can be used to restrict the number of node groups (shards) clusters can have after creation or scaling operations
Filters access by the number of replicas per node group (shards) specified in creations or scaling requests
Filters access by the SnapshotRetentionLimit parameter in the request
Filters access by the TransitEncryptionEnabled parameter present in the request. For replication group creations, default value 'false' is used as key if parameter is not present
A minimal policy that allows elasticache:DecreaseNodeGroupsInGlobalReplicationGroup. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowElasticacheDecreaseNodeGroupsInGlobalReplicationGroup",
"Effect": "Allow",
"Action": "elasticache:DecreaseNodeGroupsInGlobalReplicationGroup",
"Resource": "*"
}
]
}