Databases: Admin policies
Relational, NoSQL, in-memory and graph databases.
14 AWS managed policies. 5 have reviewed guidance; the rest have authoritative permission data pending editorial review.
User access (14)
RDS (2)
- AmazonDocDBConsoleFullAccessAdmin
Provides full access to manage Amazon DocumentDB with MongoDB compatibility using the AWS Management Console. Note this policy also grants full access to publish on all SNS topics within the account, permissions to create and edit Amazon EC…
- AmazonRDSFullAccessAdmin
Provides full access to Amazon RDS via the AWS Management Console.
Keyspaces (2)
- AmazonKeyspacesFullAccessAdmin
Provide full access to Amazon Keyspaces
- AmazonMCSFullAccessAdmin
Provide full access to Amazon Managed Apache Cassandra Service
Aurora DSQL (2)
- AmazonAuroraDSQLConsoleFullAccessAdmin
Provides console full administrative access to Aurora DSQL
- AmazonAuroraDSQLFullAccessAdmin
Provides full administrative access to Aurora DSQL
Neptune (1)
- NeptuneFullAccessAdmin
Provides full access to Amazon Neptune. Note this policy also grants full access to publish on all SNS topics within the account and full access to Amazon RDS. For more information, see https://aws.amazon.com/neptune/faqs/.
QLDB (2)
- AmazonQLDBConsoleFullAccessAdmin
Provides full access to Amazon QLDB via the AWS Management Console.
- AmazonQLDBFullAccessAdmin
Provides full access to Amazon QLDB via the service API.
DocumentDB Elastic Clusters (1)
- AmazonDocDBElasticFullAccessAdmin
Provides full access to Amazon DocumentDB Elastic Clusters and other required permissions for its dependencies including EC2, KMS, SecretsManager, CloudWatch and IAM.
ElastiCache (1)
- AmazonElastiCacheFullAccessAdmin
Provides full access to Amazon ElastiCache via the AWS Management Console.
MemoryDB (1)
- AmazonMemoryDBFullAccessAdmin
Provides full access to Amazon MemoryDB via the AWS Management Console.
Oracle Database@AWS (1)
- AmazonODBFullAccessAdmin
Provides full access to resources in Oracle Database@AWS
Other services (1)
- AmazonRedshiftQueryEditorV2FullAccessAdmin
Grants full access to the Amazon Redshift Query Editor V2 operations and resources. This policy also grants access to other required services. This includes permissions to list the Amazon Redshift clusters, read keys and aliases in AWS KMS …
Also relevant to Databases (13)
- AmazonDataZoneEnvironmentRolePermissionsBoundaryAdmin
Amazon DataZone creates IAM roles for Environments to perform data analytics actions, and uses this policy when creating these roles to define the boundary of their permissions.
- AmazonDynamoDBFullAccessHigh privilegeAdmin
Provides full access to Amazon DynamoDB via the AWS Management Console.
- AmazonDynamoDBFullAccess_v2High privilegeAdmin
Provides full access to Amazon DynamoDB
- AmazonDynamoDBFullAccesswithDataPipelineHigh privilegeAdmin
This policy is on a deprecation path. See documentation for guidance: https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/DynamoDBPipeline.html. Provides full access to Amazon DynamoDB including Export/Import using AWS Data Pip…
- AmazonEC2RoleforDataPipelineRoleHigh privilegeAdmin
Default policy for the Amazon EC2 Role for Data Pipeline service role.
- AmazonElasticMapReduceforEC2RoleHigh privilegeAdmin
Default policy for the Amazon Elastic MapReduce for EC2 service role.
- AmazonRDSDataFullAccessHigh privilegeAdmin
Allows full access to use the RDS data APIs, secret store APIs for RDS database credentials, and DB console query management APIs to execute SQL statements on Aurora Serverless clusters in the AWS account.
- AmazonTimestreamConsoleFullAccessHigh privilegeAdmin
Provides full access to manage Amazon Timestream using the AWS Management Console. Note that this policy also grants permissions for certain KMS operations, and operations to manage your saved queries. If using Customer managed CMK, please …
- AmazonTimestreamFullAccessHigh privilegeAdmin
Provides full access to Amazon Timestream. Note that this policy also grants certain KMS operation access. If using Customer managed CMK, please refer to documentation for additional permissions needed.
- AWSLambdaFullAccessHigh privilegeAdmin
This policy is on a deprecation path. See documentation for guidance: https://docs.aws.amazon.com/lambda/latest/dg/access-control-identity-based.html. Provides full access to Lambda, S3, DynamoDB, CloudWatch Metrics and Logs.
- ComputeOptimizerServiceRolePolicyAdmin
Allows ComputeOptimizer to call AWS services and collect workload details on your behalf.
- DatabaseAdministratorHigh privilegeAdmin
Grants full access permissions to AWS services and actions required to set up and configure AWS database services.
- DataScientistHigh privilegeAdmin
Grants permissions to AWS data analytics services.