rds:CreateDBSecurityGroup is a Write access-level action in the rds service. Grants permission to create a new DB security group. DB security groups control access to a DB instance
ARNs that rds:CreateDBSecurityGroup can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants rds:CreateDBSecurityGroup.
Filters access by the set of tag key-value pairs in the request
Filters access by the set of tag keys in the request
Filters access by the set of tag keys and values that can be used to tag a resource
Filters access by the set of tag key-value pairs attached to the resource
Filters access by the tag attached to a DB security group
A minimal policy that allows rds:CreateDBSecurityGroup. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowRdsCreateDBSecurityGroup",
"Effect": "Allow",
"Action": "rds:CreateDBSecurityGroup",
"Resource": "*"
}
]
}