rds:DeleteDBClusterAutomatedBackup

Write

rds:DeleteDBClusterAutomatedBackup is a Write access-level action in the rds service. Grants permission to delete cluster automated backups based on the source cluster's DbClusterResourceId value or the restorable cluster's resource ID

Resource types

ARNs that rds:DeleteDBClusterAutomatedBackup can be scoped to in an IAM policy.

arn:${Partition}:rds:${Region}:${Account}:cluster-auto-backup:${DbClusterAutomatedBackupId}
cluster-auto-backup

Condition keys

Keys you can use in the Condition block of a policy that grants rds:DeleteDBClusterAutomatedBackup.

aws:ResourceTag/${TagKey} String

Filters access by the set of tag key-value pairs attached to the resource

Example IAM policy

A minimal policy that allows rds:DeleteDBClusterAutomatedBackup. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowRdsDeleteDBClusterAutomatedBackup",
      "Effect": "Allow",
      "Action": "rds:DeleteDBClusterAutomatedBackup",
      "Resource": "*"
    }
  ]
}

Related actions in rds

View all rds actions →