rds:ModifyDBCluster is a Write access-level action in the rds service. Grants permission to modify a setting for an Amazon Aurora DB cluster or Amazon DocumentDB cluster
ARNs that rds:ModifyDBCluster can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants rds:ModifyDBCluster.
Filters access by the type of DB instance class
Filters access by the value that specifies whether RDS manages master user password in AWS Secrets Manager for the DB instance or cluster
Filters access by the value that contains the number of Provisioned IOPS (PIOPS) that the instance supports. To indicate a DB instance that does not have PIOPS enabled, specify 0
Filters access by the storage volume size (in GB)
Filters access by the set of tag key-value pairs attached to the resource
Filters access by the tag attached to a DB cluster
Filters access by the tag attached to a DB cluster parameter group
Filters access by the tag attached to a DB option group
Filters access by the tag attached to a DB parameter group
A minimal policy that allows rds:ModifyDBCluster. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowRdsModifyDBCluster",
"Effect": "Allow",
"Action": "rds:ModifyDBCluster",
"Resource": "*"
}
]
}