169 actions in the rds service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.
Grants permission to associate an Identity and Access Management (IAM) role from an Aurora DB cluster
Grants permission to associate an AWS Identity and Access Management (IAM) role with a DB instance
Grants permission to add a source identifier to an existing RDS event notification subscription
Grants permission to add metadata tags to an Amazon RDS resource
Grants permission to apply a pending maintenance action to a resource
Grants permission to enable ingress to a DBSecurityGroup using one of two forms of authorization
Grants permission to backtrack a DB cluster to a specific time, without creating a new DB cluster
Grants permission to cancel an export task in progress
Grants permission to copy a custom engine version
Grants permission to copy the specified DB cluster parameter group
Grants permission to create a snapshot of a DB cluster
Grants permission to copy the specified DB parameter group
Grants permission to copy the specified DB snapshot
Grants permission to copy the specified option group
Grants permission to create a blue-green deployment for a given source cluster or instance
Grants permission to create a custom engine version
Grants permission to create a new DB cluster
Grants permission to create a new custom endpoint and associates it with an Amazon Aurora DB cluster or Amazon DocumentDB cluster
Grants permission to create a new DB cluster parameter group
Grants permission to create a snapshot of a DB cluster
Grants permission to create a new DB instance
Grants permission to create a DB instance that acts as a Read Replica of a source DB instance
Grants permission to create a new DB parameter group
Grants permission to create a database proxy
Grants permission to create a database proxy endpoint
Grants permission to create a new DB security group. DB security groups control access to a DB instance
Grants permission to create a new Aurora Limitless Database DB shard group
Grants permission to create a DBSnapshot
Grants permission to create a new DB subnet group
Grants permission to create an RDS event notification subscription
Grants permission to create an Aurora global database or DocumentDB global database spread across multiple regions
Grants permission to create an Aurora zero-ETL integration with Redshift
Grants permission to create a new option group
Grants permission to create a new tenant database
Grants permission to access a resource in the remote Region when executing cross-Region operations, such as cross-Region snapshot copy or cross-Region read replica creation
Grants permission to delete blue green deployments
Grants permission to delete an existing custom engine version
Grants permission to delete a previously provisioned DB cluster
Grants permission to delete cluster automated backups based on the source cluster's DbClusterResourceId value or the restorable cluster's resource ID
Grants permission to delete a custom endpoint and removes it from an Amazon Aurora DB cluster or Amazon DocumentDB cluster
Grants permission to delete a specified DB cluster parameter group
Grants permission to delete a DB cluster snapshot
Grants permission to delete a previously provisioned DB instance
Grants permission to delete automated backups based on the source instance's DbiResourceId value or the restorable instance's resource ID
Grants permission to delete a specified DBParameterGroup
Grants permission to delete a database proxy
Grants permission to delete a database proxy endpoint
Grants permission to delete a DB security group
Grants permission to delete an Aurora Limitless Database DB shard group
Grants permission to delete a DBSnapshot
Grants permission to delete a DB subnet group
Grants permission to delete an RDS event notification subscription
Grants permission to delete a global database cluster
Grants permission to delete an Aurora zero-ETL integration with Redshift
Grants permission to delete an existing option group
Grants permission to delete a tenant database
Grants permission to remove targets from a database proxy target group
Grants permission to list all of the attributes for a customer account
Grants permission to describe blue green deployments
Grants permission to list the set of CA certificates provided by Amazon RDS for this AWS account
Grants permission to return a list of cluster automated backups for both current and deleted clusters
Grants permission to return information about backtracks for a DB cluster
Grants permission to return information about endpoints for an Amazon Aurora DB cluster
Grants permission to return a list of DBClusterParameterGroup descriptions
Grants permission to return the detailed parameter list for a particular DB cluster parameter group
Grants permission to return information about provisioned Aurora DB clusters or DocumentDB clusters
Grants permission to return a list of DB cluster snapshot attribute names and values for a manual DB cluster snapshot
Grants permission to return information about DB cluster snapshots
Grants permission to return a list of the available DB engines
Grants permission to return a list of automated backups for both current and deleted instances
Grants permission to return information about provisioned RDS instances
Grants permission to return a list of DB log files for the DB instance
Grants permission to return information specific for each DB major engine versions
Grants permission to return a list of DBParameterGroup descriptions
Grants permission to return the detailed parameter list for a particular DB parameter group
Grants permission to view proxies
Grants permission to view proxy endpoints
Grants permission to view database proxy target group details
Grants permission to view database proxy target details
Grants permission to list recommendation details
Grants permission to return a list of DBSecurityGroup descriptions
Grants permission to return information about all Aurora Limitless Database DB shard groups for this account. You can filter by shard group(s)
Grants permission to return a list of DB snapshot attribute names and values for a manual DB snapshot
Grants permission to return information about DB snapshots
Grants permission to return information about tenant databases in DB snapshots. You can filter by Region or snapshot
Grants permission to return a list of DBSubnetGroup descriptions
Grants permission to return the default engine and system parameter information for the cluster database engine
Grants permission to return the default engine and system parameter information for the specified database engine
Grants permission to display a list of categories for all event source types, or, if specified, for a specified source type
Grants permission to return events related to DB instances, DB security groups, DB snapshots, and DB parameter groups for the past 14 days
Grants permission to list all the subscription descriptions for a customer account
Grants permission to return information about the export tasks
Grants permission to return information about Aurora global database clusters or DocumentDB global database clusters
Grants permission to describe an Aurora zero-ETL integration with Redshift
Grants permission to describe all available options
Grants permission to describe the available option groups
Grants permission to return a list of orderable DB instance options for the specified engine
Grants permission to return a list of resources (for example, DB instances) that have at least one pending maintenance action
Grants permission to return information about recommendation groups
Grants permission to return information about recommendations
Grants permission to return information about reserved DB instances for this account, or about a specified reserved DB instance
Grants permission to list available reserved DB instance offerings
Grants permission to return a list of the source AWS Regions where the current AWS Region can create a Read Replica or copy a DB snapshot from
Grants permission to return information about provisioned tenant databases. You can filter by Region or snapshot
Grants permission to list available modifications you can make to your DB instance
Grants permission to disable http endpoint for a DB cluster
Grants permission to download specified log file
Grants permission to download all or a portion of the specified log file, up to 1 MB in size
Grants permission to enable http endpoint for a DB cluster
Grants permission to force a failover for a DB cluster
Grants permission to failover a global cluster
Grants permission to list all tags on an Amazon RDS resource
Grants permission to modify a database activity stream
Grants permission to modify the system-default Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificate for Amazon RDS for new DB instances
Grants permission to modify current cluster capacity for an Amazon Aurora Serverless DB cluster
Grants permission to modify an existing custom engine version
Grants permission to modify a setting for an Amazon Aurora DB cluster or Amazon DocumentDB cluster
Grants permission to modify the properties of an endpoint in an Amazon Aurora DB cluster or Amazon DocumentDB cluster
Grants permission to modify the parameters of a DB cluster parameter group
Grants permission to add an attribute and values to, or removes an attribute and values from, a manual DB cluster snapshot
Grants permission to modify settings for a DB instance
Grants permission to modify the parameters of a DB parameter group
Grants permission to modify database proxy
Grants permission to modify database proxy endpoint
Grants permission to modify target group for a database proxy
Grants permission to modify recommendation
Grants permission to modify properties of an Aurora Limitless Database DB shard group
Grants permission to update a manual DB snapshot, which can be encrypted or not encrypted, with a new engine version
Grants permission to add an attribute and values to, or removes an attribute and values from, a manual DB snapshot
Grants permission to modify an existing DB subnet group
Grants permission to modify an existing RDS event notification subscription
Grants permission to modify a setting for an Amazon Aurora global cluster or Amazon DocumentDB global cluster
Grants permission to modify an Aurora zero-ETL integration with Redshift
Grants permission to modify an existing option group
Grants permission to modify recommendation
Grants permission to modify a tenant database
Grants permission to promote a Read Replica DB instance to a standalone DB instance
Grants permission to promote a Read Replica DB cluster to a standalone DB cluster
Grants permission to purchase a reserved DB instance offering
Grants permission to reboot a previously provisioned DB cluster
Grants permission to restart the database engine service
Grants permission to reboot an Aurora Limitless Database DB shard group
Grants permission to add targets to a database proxy target group
Grants permission to detach an Aurora secondary cluster from an Aurora global database cluster or DocumentDB global cluster
Grants permission to disassociate an AWS Identity and Access Management (IAM) role from an Amazon Aurora DB cluster
Grants permission to disassociate an AWS Identity and Access Management (IAM) role from a DB instance
Grants permission to remove a source identifier from an existing RDS event notification subscription
Grants permission to remove metadata tags from an Amazon RDS resource
Grants permission to modify the parameters of a DB cluster parameter group to the default value
Grants permission to modify the parameters of a DB parameter group to the engine/system default value
Grants permission to create an Amazon Aurora DB cluster from data stored in an Amazon S3 bucket
Grants permission to create a new DB cluster from a DB cluster snapshot
Grants permission to restore a DB cluster to an arbitrary point in time
Grants permission to create a new DB instance from a DB snapshot
Grants permission to create a new DB instance from an Amazon S3 bucket
Grants permission to restore a DB instance to an arbitrary point in time
Grants permission to revoke ingress from a DBSecurityGroup for previously authorized IP ranges or EC2 or VPC Security Groups
Grants permission to start Activity Stream
Grants permission to start the DB cluster
Grants permission to start the DB instance
Grants permission to start replication of automated backups to a different AWS Region
Grants permission to start a new Export task for a DB snapshot
Grants permission to stop Activity Stream
Grants permission to stop the DB cluster
Grants permission to stop the DB instance
Grants permission to stop automated backup replication for a DB instance
Grants permission to switch a blue-green deployment from source instance or cluster to target
Grants permission to switchover a global cluster
Grants permission to switch over a read replica, making it the new primary database