rds:RestoreDBClusterFromS3 is a Write access-level action in the rds service. Grants permission to create an Amazon Aurora DB cluster from data stored in an Amazon S3 bucket
ARNs that rds:RestoreDBClusterFromS3 can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants rds:RestoreDBClusterFromS3.
Filters access by the set of tag key-value pairs in the request
Filters access by the set of tag keys in the request
Filters access by the database engine. For possible values refer to the engine parameter in CreateDBInstance API
Filters access by the user-defined name of the database on the DB instance
Filters access by the value that specifies whether RDS manages master user password in AWS Secrets Manager for the DB instance or cluster
Filters access by the value that specifies whether the DB instance storage should be encrypted. To enforce storage encryption, specify true
Filters access by the set of tag keys and values that can be used to tag a resource
Filters access by the set of tag key-value pairs attached to the resource
Filters access by the tag attached to a DB cluster
Filters access by the tag attached to a DB cluster parameter group
Filters access by the tag attached to a DB option group
Filters access by the tag attached to a DB subnet group
A minimal policy that allows rds:RestoreDBClusterFromS3. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowRdsRestoreDBClusterFromS3",
"Effect": "Allow",
"Action": "rds:RestoreDBClusterFromS3",
"Resource": "*"
}
]
}