Databases: Reader policies
Relational, NoSQL, in-memory and graph databases.
16 AWS managed policies. 6 have reviewed guidance; the rest have authoritative permission data pending editorial review. 1 are service-linked role policies, shown with permission data only.
User access (14)
RDS (3)
- AmazonDocDBReadOnlyAccessReader
Provides read-only access to Amazon DocumentDB with MongoDB compatibility. Note that this policy also grants access to Amazon RDS and Amazon Neptune resources.
- AmazonRDSPerformanceInsightsReadOnlyReader
Read-Only policy for RDS Performance Insights
- AmazonRDSReadOnlyAccessReader
Provides read only access to Amazon RDS via the AWS Management Console.
Keyspaces (2)
- AmazonKeyspacesReadOnlyAccessReader
Provide read only access to Amazon Keyspaces
- AmazonKeyspacesReadOnlyAccess_v2Reader
Provide read only access to Amazon Keyspaces and related AWS services.
Aurora DSQL (1)
- AmazonAuroraDSQLReadOnlyAccessReader
Provides read only access to Aurora DSQL
Neptune (2)
- NeptuneGraphReadOnlyAccessReader
Provides read only access to all Amazon Neptune Analytics resources along with read only permissions for dependent services.
- NeptuneReadOnlyAccessReader
Provides read only access to Amazon Neptune. Note that this policy also grants access to Amazon RDS resources. For more information, see https://aws.amazon.com/neptune/faqs/.
QLDB (1)
- AmazonQLDBReadOnlyReader
Provides read only access to Amazon QLDB.
DocumentDB Elastic Clusters (1)
- AmazonDocDBElasticReadOnlyAccessReader
Provides read-only access to Amazon DocDB-Elastic and CloudWatch metrics.
ElastiCache (1)
- AmazonElastiCacheReadOnlyAccessReader
Provides read only access to Amazon ElastiCache via the AWS Management Console.
MemoryDB (1)
- AmazonMemoryDBReadOnlyAccessReader
Provides read only access to Amazon MemoryDB via the AWS Management Console.
Oracle Database@AWS (1)
- AmazonODBReadOnlyAccessReader
Provides read-only access to Oracle Database@AWS resources
Other services (1)
- AmazonDynamoDBReadOnlyAccessReader
Provides read only access to Amazon DynamoDB via the AWS Management Console.
Service roles (1)
- AWSQuickSightDescribeRDSReader
Allow QuickSight to describe the RDS resources
Service-linked roles (1)
- AWSServiceRoleForCloudWatchMetrics_DbPerfInsightsServiceRolePolicyReader
Allows CloudWatch to access RDS Performance Insights metrics on your behalf
Also relevant to Databases (5)
- AmazonMCSReadOnlyAccessReader
Provide read only access to Amazon Managed Apache Cassandra Service
- AWSResourceGroupsReadOnlyAccessReader
This is the read only policy for AWS Resource Groups
- AWSTrustedAdvisorServiceRolePolicyReader
Access for the AWS Trusted Advisor Service to help reduce cost, increase performance, and improve security of your AWS environment.
- CloudWatchAutomaticDashboardsAccessReader
Provides access to the non-CloudWatch APIs used to display CloudWatch Automatic Dashboards, including the contents of objects such as Lambda functions
- ConsoleViewOnlyAccessFromVercelReader
For use with accounts created through the Vercel Marketplace integration with AWS. Provides access to view all resources for the services that are integrated with the Vercel Marketplace.