redshift:DescribeClusterSubnetGroups is a Read access-level action in the redshift service. Grants permission to describe one or more cluster subnet group objects, which contain metadata about your cluster subnet groups
This action does not support resource-level permissions; use "Resource": "*" in your policy.
No condition keys are documented for this action.
A minimal policy that allows redshift:DescribeClusterSubnetGroups. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowRedshiftDescribeClusterSubnetGroups",
"Effect": "Allow",
"Action": "redshift:DescribeClusterSubnetGroups",
"Resource": "*"
}
]
}