redshift:CreateHsmConfiguration is a Write access-level action in the redshift service. Grants permission to create an HSM configuration that contains information required by a cluster to store and use database encryption keys in a hardware security module (HSM)
ARNs that redshift:CreateHsmConfiguration can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants redshift:CreateHsmConfiguration.
Filters access by actions based on the allowed set of values for each of the tags
Filters access by actions based on the presence of mandatory tags in the request
Filters access by actions based on tag-value associated with the resource
A minimal policy that allows redshift:CreateHsmConfiguration. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowRedshiftCreateHsmConfiguration",
"Effect": "Allow",
"Action": "redshift:CreateHsmConfiguration",
"Resource": "*"
}
]
}