elasticache:ModifyReplicationGroup is a Write access-level action in the elasticache service. Grants permission to modify the settings for a replication group
ARNs that elasticache:ModifyReplicationGroup can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants elasticache:ModifyReplicationGroup.
Filters actions based on the tags associated with the resource
Filters actions based on the tags that are passed in the request
Filters actions based on the tag keys that are passed in the request
Filters access by the CacheParameterGroupName parameter in the request
Filters access by the presence of non empty AuthToken parameter in the request
Filters access by the AutomaticFailoverEnabled parameter in the request
Filters access by the cacheNodeType parameter present in the request. This key can be used to restrict which cache node types can be used on cluster creation or scaling operations
Filters access by the cluster mode parameter present in the request. Default value for single node group (shard) creations is false
Filters access by the Durability parameter in the request. Valid values are default, async, sync, or disabled
Filters access by the engineVersion parameter present in creation or cluster modification requests
Filters access by the AZMode parameter, MultiAZEnabled parameter or the number of availability zones that the cluster or replication group can be placed in
Filters access by the SnapshotRetentionLimit parameter in the request
Filters access by the TransitEncryptionEnabled parameter present in the request. For replication group creations, default value 'false' is used as key if parameter is not present
A minimal policy that allows elasticache:ModifyReplicationGroup. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowElasticacheModifyReplicationGroup",
"Effect": "Allow",
"Action": "elasticache:ModifyReplicationGroup",
"Resource": "*"
}
]
}