Databases: Operator policies

Provides full access to Amazon DocumentDB with MongoDB compatibility. Note this policy also grants full access to publish on all SNS topics within the account and full access to Amazon RDS and Amazon Neptune.

Provides full access to RDS Performance Insights via the AWS Management Console

Grants the ability to work with Amazon Redshift Query Editor V2 without sharing resources. The granted principal can only read, update and delete its own resources but cannot share them. This policy also grants access to other required serv…

Grants the ability to work with Amazon Redshift Query Editor V2 with limited sharing of resources. The granted principal can read, write and share its own resources. The granted principal can read the resources shared with its team but cann…

Grants the ability to work with Amazon Redshift Query Editor V2 with sharing of resources. The granted principal can read, write and share its own resources. The granted principal can read and update the resources shared with its team. This…

Provides full administrative access to create, update, delete and list Amazon Timestream InfluxDB instances and create and list parameter groups. Please refer to documentation for additional permissions needed.

Provides administrative access to manage Amazon Timestream InfluxDB instances and parameter groups except marketplace operations.

Provides read only access to Amazon Timestream. Policy also provides permission to cancel any running query. If using Customer managed CMK, please refer to documentation for additional permissions needed.

Provides read access to DynamoDB Streams.

Grants permissions required for the operation of AWS Thinkbox's Deadline Resource Tracker. This includes full access to some EC2 actions, including DeleteFleets and CancelSpotFleetRequests.

Provides full access to manage Amazon Neptune using the AWS Management Console. Note this policy also grants full access to publish on all SNS topics within the account, permissions to create and edit Amazon EC2 instances and VPC configurat…

Provides AWS Backup permission to create backups on your behalf across AWS services

Provides AWS Backup permission to perform restores on your behalf across AWS services. This policy includes permissions to create and delete AWS resources, such as EBS volumes, RDS instances, and EFS file systems, which are part of the rest…

(Elastic Beanstalk operations role) Allows an environment to integrate an Amazon RDS instance.

(Elastic Beanstalk operations role) Allows a worker environment tier to create an Amazon DynamoDB table and an Amazon SQS queue.

This policy grants the Fault Injection Simulator Service permission in RDS and other required services to perform FIS actions.

Provides list and read access to DynamoDB streams and write permissions to CloudWatch logs.

AWS QuickSight access to AWS Timestream APIs. Customers can attach this policy to AWS QuickSight role to allow retrieval of data and metadata.

Policy granting permissions to Application Auto Scaling to access Amazon ElastiCache and Amazon CloudWatch.

Policy granting permissions to Application Auto Scaling to access Amazon Neptune and Amazon CloudWatch.

Policy granting permissions to Application Auto Scaling to access RDS and CloudWatch.

Provides AWS Backup permission to create backups on your behalf across AWS services

Permissions required by Keyspaces for cross-region data replication