elasticache:DeleteReplicationGroup is a Write access-level action in the elasticache service. Grants permission to delete an existing replication group
ARNs that elasticache:DeleteReplicationGroup can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants elasticache:DeleteReplicationGroup.
Filters actions based on the tags that are passed in the request
Filters actions based on the tags associated with the resource
Filters actions based on the tag keys that are passed in the request
Filters access by the AtRestEncryptionEnabled parameter present in the request or default false value if parameter is not present
Filters access by the presence of non empty AuthToken parameter in the request
Filters access by the AutomaticFailoverEnabled parameter in the request
Filters access by the cacheNodeType parameter present in the request. This key can be used to restrict which cache node types can be used on cluster creation or scaling operations
Filters access by the CacheParameterGroupName parameter in the request
Filters access by the cluster mode parameter present in the request. Default value for single node group (shard) creations is false
Filters access by the Durability parameter in the request. Valid values are default, async, sync, or disabled
Filters access by the engine type present in creation requests. For replication group creations, default engine 'redis' is used as key if parameter is not present
Filters access by the engineVersion parameter present in creation or cluster modification requests
Filters access by the Key ID of the KMS key
Filters access by the AZMode parameter, MultiAZEnabled parameter or the number of availability zones that the cluster or replication group can be placed in
Filters access by the NumNodeGroups or NodeGroupCount parameter specified in the request. This key can be used to restrict the number of node groups (shards) clusters can have after creation or scaling operations
Filters access by the number of replicas per node group (shards) specified in creations or scaling requests
Filters access by the SnapshotRetentionLimit parameter in the request
Filters access by the TransitEncryptionEnabled parameter present in the request. For replication group creations, default value 'false' is used as key if parameter is not present
To use elasticache:DeleteReplicationGroup you may also need to grant:
A minimal policy that allows elasticache:DeleteReplicationGroup. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowElasticacheDeleteReplicationGroup",
"Effect": "Allow",
"Action": "elasticache:DeleteReplicationGroup",
"Resource": "*"
}
]
}