rds:CopyDBSnapshot is a Write access-level action in the rds service. Grants permission to copy the specified DB snapshot
ARNs that rds:CopyDBSnapshot can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants rds:CopyDBSnapshot.
Filters access by the set of tag key-value pairs in the request
Filters access by the set of tag keys in the request
Filters access by the value that specifies whether the CopyDBSnapshot action requires copying the DB option group
Filters access by the set of tag keys and values that can be used to tag a resource
Filters access by the set of tag key-value pairs attached to the resource
Filters access by the tag attached to a DB snapshot
A minimal policy that allows rds:CopyDBSnapshot. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowRdsCopyDBSnapshot",
"Effect": "Allow",
"Action": "rds:CopyDBSnapshot",
"Resource": "*"
}
]
}