RDS
Prefix rds, 173 actions · Domain Databases
29 AWS managed policies. 7 have reviewed guidance; the rest have authoritative permission data pending editorial review. 6 are service-linked role policies, shown with permission data only.
User access (10)
- AmazonDocDBConsoleFullAccessAdmin
- AmazonDocDBReadOnlyAccessReader
- AmazonRDSFullAccessAdmin
- AmazonRDSPerformanceInsightsReadOnlyReader
- AmazonRDSReadOnlyAccessReader
- ConsoleViewOnlyAccessFromVercelReader
- DatabaseAdministratorHigh privilegeAdmin
- DataScientistHigh privilegeAdmin
- NeptuneFullAccessAdmin
- NeptuneReadOnlyAccessReader
Operator and limited (7)
- AmazonDocDBFullAccessOperator
- AmazonRDSPerformanceInsightsFullAccessOperator
- AWSBudgetsActions_RolePolicyForResourceAdministrationWithSSMOperator
- ConsoleFullAccessFromVercelHigh privilegeOperator
- DBModDiscoveryAndAssessmentOperator
- DBModVirtualSourceOperator
- NeptuneConsoleFullAccessOperator
Service roles (6)
Service-linked roles (6)
Also grants RDS actions (71)
- AccessAnalyzerServiceRolePolicy
- AdministratorAccess
- AdministratorAccess-AWSElasticBeanstalk
- AIDevOpsAgentAccessPolicy
- AIDevOpsAgentActionsPolicy
- AIOpsAssistantPolicy
- AmazonDataZoneSageMakerEnvironmentRolePermissionsBoundary
- AmazonDevOpsGuruConsoleFullAccess
- AmazonDevOpsGuruFullAccess
- AmazonDevOpsGuruReadOnlyAccess
- AmazonDevOpsGuruServiceRolePolicy
- AmazonEC2RoleforDataPipelineRole
- AmazonElasticMapReduceforEC2Role
- AmazonFISServiceRolePolicy
- AmazonRDSCustomServiceRolePolicy
- AmazonRDSPreviewServiceRolePolicy
- AmazonRDSServiceRolePolicy
- AmazonSageMakerCanvasDataPrepFullAccess
- AmazonSageMakerCanvasFullAccess
- AssuranceServiceRolePolicy
- AWS_ConfigRole
- AWSAuditManagerServiceRolePolicy
- AWSBackupFullAccess
- AWSBackupOperatorAccess
- AWSBudgetsActionsWithAWSResourceControlAccess
- AWSCODAPermissionsBoundary
- AWSConfigServiceRolePolicy
- AWSDataPipeline_FullAccess
- AWSDataPipeline_PowerUser
- AWSElasticBeanstalkManagedUpdatesCustomerRolePolicy
- AWSElasticBeanstalkManagedUpdatesServiceRolePolicy
- AWSElasticBeanstalkReadOnly
- AWSElasticBeanstalkRoleCore
- AWSElasticBeanstalkService
- AWSFinOpsAgentServiceRolePolicy
- AWSGlueConsoleFullAccess
- AWSGlueConsoleSageMakerNotebookFullAccess
- AWSMcpServiceActionsFullAccess
- AWSPartnerLedSupportReadOnlyAccess
- AWSResilienceHubAsssessmentExecutionPolicy
- AWSResilienceHubV2AssessmentExecutionPolicy
- AWSResourceExplorerServiceRolePolicy
- AWSResourceGroupsReadOnlyAccess
- AWSSupportServiceRolePolicy
- AWSWellArchitectedAgentResourceScanningServiceRolePolicy
- CloudWatchApplicationInsightsFullAccess
- CloudwatchApplicationInsightsServiceLinkedRolePolicy
- CloudWatchAutomaticDashboardsAccess
- CloudWatchOmniAWSIntegrationPolicy
- ComputeOptimizerReadOnlyAccess
- ComputeOptimizerServiceRolePolicy
- DBModProvisioningAndMigration
- FinOpsAgentAgentPolicy
- PowerUserAccess
- ReadOnlyAccess
- ResourceGroupsTaggingAPITagUntagSupportedResources
- Route53RecoveryReadinessServiceRolePolicy
- SageMakerStudioAdminIAMDefaultExecutionPolicy
- SageMakerStudioAdminIAMPermissiveExecutionPolicy
- SageMakerStudioUserIAMDefaultExecutionPolicy
- SageMakerStudioUserIAMPermissiveExecutionPolicy
- SecretsManagerReadWrite
- SecurityAudit
- ServiceQuotasFullAccess
- ServiceQuotasReadOnlyAccess
- SupportUser
- SystemAdministrator
- ViewOnlyAccess
- VPCLatticeFullAccess
- VPCLatticeReadOnlyAccess
- WellArchitectedAgentResourceScanning
addroletodbcluster addroletodbinstance addsourceidentifiertosubscription addtagstoresource applypendingmaintenanceaction authorizedbsecuritygroupingress backtrackdbcluster canceldbcapacityreservation cancelexporttask copycustomdbengineversion copydbclusterparametergroup copydbclustersnapshot copydbparametergroup copydbsnapshot copyoptiongroup createbluegreendeployment createcustomdbengineversion createdbcapacityreservation createdbcluster createdbclusterendpoint createdbclusterparametergroup createdbclustersnapshot createdbinstance createdbinstancereadreplica createdbparametergroup createdbproxy createdbproxyendpoint createdbsecuritygroup createdbshardgroup createdbsnapshot createdbsubnetgroup createeventsubscription createglobalcluster createintegration createoptiongroup createtenantdatabase crossregioncommunication deletebluegreendeployment deletecustomdbengineversion deletedbcluster deletedbclusterautomatedbackup deletedbclusterendpoint deletedbclusterparametergroup deletedbclustersnapshot deletedbinstance deletedbinstanceautomatedbackup deletedbparametergroup deletedbproxy deletedbproxyendpoint deletedbsecuritygroup deletedbshardgroup deletedbsnapshot deletedbsubnetgroup deleteeventsubscription deleteglobalcluster deleteintegration deleteoptiongroup deletetenantdatabase deregisterdbproxytargets describeaccountattributes describebluegreendeployments describecertificates describedbcapacityreservations describedbclusterautomatedbackups describedbclusterbacktracks describedbclusterendpoints describedbclusterparametergroups describedbclusterparameters describedbclustersnapshotattributes describedbclustersnapshots describedbclusters describedbengineversions describedbinstanceautomatedbackups describedbinstances describedblogfiles describedbmajorengineversions describedbparametergroups describedbparameters describedbproxies describedbproxyendpoints describedbproxytargetgroups describedbproxytargets describedbrecommendations describedbsecuritygroups describedbshardgroups describedbsnapshotattributes describedbsnapshottenantdatabases describedbsnapshots describedbsubnetgroups describeenginedefaultclusterparameters describeenginedefaultparameters describeeventcategories describeeventsubscriptions describeevents describeexporttasks describeglobalclusters describeintegrations describeoptiongroupoptions describeoptiongroups describeorderabledbinstanceoptions describependingmaintenanceactions describerecommendationgroups describerecommendations describereserveddbinstances describereserveddbinstancesofferings describesourceregions describetenantdatabases describevaliddbinstancemodifications disablehttpendpoint downloadcompletedblogfile downloaddblogfileportion enablehttpendpoint failoverdbcluster failoverglobalcluster listtagsforresource modifyactivitystream modifycertificates modifycurrentdbclustercapacity modifycustomdbengineversion modifydbcapacityreservation modifydbcluster modifydbclusterendpoint modifydbclusterparametergroup modifydbclustersnapshotattribute modifydbinstance modifydbparametergroup modifydbproxy modifydbproxyendpoint modifydbproxytargetgroup modifydbrecommendation modifydbshardgroup modifydbsnapshot modifydbsnapshotattribute modifydbsubnetgroup modifyeventsubscription modifyglobalcluster modifyintegration modifyoptiongroup modifyrecommendation modifytenantdatabase promotereadreplica promotereadreplicadbcluster purchasereserveddbinstancesoffering rebootdbcluster rebootdbinstance rebootdbshardgroup registerdbproxytargets removefromglobalcluster removerolefromdbcluster removerolefromdbinstance removesourceidentifierfromsubscription removetagsfromresource resetdbclusterparametergroup resetdbparametergroup restoredbclusterfroms3 restoredbclusterfromsnapshot restoredbclustertopointintime restoredbinstancefromdbsnapshot restoredbinstancefroms3 restoredbinstancetopointintime revokedbsecuritygroupingress startactivitystream startdbcluster startdbinstance startdbinstanceautomatedbackupsreplication startexporttask stopactivitystream stopdbcluster stopdbinstance stopdbinstanceautomatedbackupsreplication switchoverbluegreendeployment switchoverglobalcluster switchoverreadreplica
Actions (173)
| Action | Access level | Policies granting without limits | Policies granting with resource or condition limits |
|---|---|---|---|
| rds:AddRoleToDBCluster | Write | 13 | 1 |
| rds:AddRoleToDBInstance | Write | 9 | 1 |
| rds:AddSourceIdentifierToSubscription | Write | 13 | 1 |
| rds:AddTagsToResource | Tagging | 17 | 5 |
| rds:ApplyPendingMaintenanceAction | Write | 14 | 1 |
| rds:AuthorizeDBSecurityGroupIngress | Permissions management | 9 | 3 |
| rds:BacktrackDBCluster | Write | 9 | 1 |
| rds:CancelDBCapacityReservation | Write | 9 | 1 |
| rds:CancelExportTask | Write | 9 | 1 |
| rds:CopyCustomDBEngineVersion | Write | 9 | 1 |
| rds:CopyDBClusterParameterGroup | Write | 14 | 1 |
| rds:CopyDBClusterSnapshot | Write | 15 | 2 |
| rds:CopyDBParameterGroup | Write | 14 | 1 |
| rds:CopyDBSnapshot | Write | 10 | 2 |
| rds:CopyOptionGroup | Write | 9 | 1 |
| rds:CreateBlueGreenDeployment | Write | 9 | 1 |
| rds:CreateCustomDBEngineVersion | Write | 9 | 1 |
| rds:CreateDBCapacityReservation | Write | 9 | 1 |
| rds:CreateDBCluster | Write | 11 | 5 |
| rds:CreateDBClusterEndpoint | Write | 11 | 1 |
| rds:CreateDBClusterParameterGroup | Write | 14 | 1 |
| rds:CreateDBClusterSnapshot | Write | 16 | 1 |
| rds:CreateDBInstance | Write | 12 | 10 |
| rds:CreateDBInstanceReadReplica | Write | 9 | 1 |
| rds:CreateDBParameterGroup | Write | 14 | 1 |
| rds:CreateDBProxy | Write | 9 | 1 |
| rds:CreateDBProxyEndpoint | Write | 9 | 1 |
| rds:CreateDBSecurityGroup | Write | 9 | 3 |
| rds:CreateDBShardGroup | Write | 9 | 1 |
| rds:CreateDBSnapshot | Write | 10 | 1 |
| rds:CreateDBSubnetGroup | Write | 13 | 4 |
| rds:CreateEventSubscription | Write | 13 | 1 |
| rds:CreateGlobalCluster | Write | 11 | 1 |
| rds:CreateIntegration | Write | 9 | 1 |
| rds:CreateOptionGroup | Write | 9 | 1 |
| rds:CreateTenantDatabase | Write | 10 | 1 |
| rds:CrossRegionCommunication | Write | 12 | 1 |
| rds:DeleteBlueGreenDeployment | Write | 9 | 1 |
| rds:DeleteCustomDBEngineVersion | Write | 9 | 1 |
| rds:DeleteDBCluster | Write | 15 | 2 |
| rds:DeleteDBClusterAutomatedBackup | Write | 10 | 2 |
| rds:DeleteDBClusterEndpoint | Write | 11 | 1 |
| rds:DeleteDBClusterParameterGroup | Write | 14 | 1 |
| rds:DeleteDBClusterSnapshot | Write | 14 | 4 |
| rds:DeleteDBInstance | Write | 16 | 5 |
| rds:DeleteDBInstanceAutomatedBackup | Write | 9 | 3 |
| rds:DeleteDBParameterGroup | Write | 14 | 1 |
| rds:DeleteDBProxy | Write | 9 | 1 |
| rds:DeleteDBProxyEndpoint | Write | 9 | 1 |
| rds:DeleteDBSecurityGroup | Write | 9 | 3 |
| rds:DeleteDBShardGroup | Write | 9 | 1 |
| rds:DeleteDBSnapshot | Write | 9 | 4 |
| rds:DeleteDBSubnetGroup | Write | 13 | 2 |
| rds:DeleteEventSubscription | Write | 13 | 1 |
| rds:DeleteGlobalCluster | Write | 11 | 1 |
| rds:DeleteIntegration | Write | 9 | 1 |
| rds:DeleteOptionGroup | Write | 9 | 1 |
| rds:DeleteTenantDatabase | Write | 10 | 2 |
| rds:DeregisterDBProxyTargets | Write | 9 | 1 |
| rds:DescribeAccountAttributes | List | 39 | 1 |
| rds:DescribeBlueGreenDeployments | List | 29 | 1 |
| rds:DescribeCertificates | List | 35 | 1 |
| rds:DescribeDBCapacityReservations | List | 26 | 1 |
| rds:DescribeDBClusterAutomatedBackups | List | 34 | 1 |
| rds:DescribeDBClusterBacktracks | List | 27 | 1 |
| rds:DescribeDBClusterEndpoints | List | 31 | 1 |
| rds:DescribeDBClusterParameterGroups | List | 41 | 3 |
| rds:DescribeDBClusterParameters | List | 40 | 3 |
| rds:DescribeDBClusterSnapshotAttributes | List | 37 | 1 |
| rds:DescribeDBClusterSnapshots | List | 46 | 2 |
| rds:DescribeDBClusters | List | 66 | 7 |
| rds:DescribeDBEngineVersions | List | 46 | 3 |
| rds:DescribeDBInstanceAutomatedBackups | List | 35 | 2 |
| rds:DescribeDBInstances | List | 82 | 8 |
| rds:DescribeDBLogFiles | List | 34 | 1 |
| rds:DescribeDBMajorEngineVersions | List | 28 | 1 |
| rds:DescribeDBParameterGroups | List | 41 | 3 |
| rds:DescribeDBParameters | List | 39 | 3 |
| rds:DescribeDBProxies | List | 33 | 4 |
| rds:DescribeDBProxyEndpoints | List | 31 | 3 |
| rds:DescribeDBProxyTargetGroups | List | 31 | 2 |
| rds:DescribeDBProxyTargets | List | 32 | 2 |
| rds:DescribeDBRecommendations | List | 27 | 1 |
| rds:DescribeDBSecurityGroups | List | 39 | 1 |
| rds:DescribeDBShardGroups | List | 31 | 5 |
| rds:DescribeDBSnapshotAttributes | List | 32 | 1 |
| rds:DescribeDBSnapshotTenantDatabases | List | 30 | 1 |
| rds:DescribeDBSnapshots | List | 42 | 2 |
| rds:DescribeDBSubnetGroups | List | 44 | 4 |
| rds:DescribeEngineDefaultClusterParameters | List | 35 | 1 |
| rds:DescribeEngineDefaultParameters | List | 37 | 2 |
| rds:DescribeEventCategories | List | 34 | 1 |
| rds:DescribeEventSubscriptions | List | 38 | 3 |
| rds:DescribeEvents | List | 35 | 1 |
| rds:DescribeExportTasks | List | 28 | 1 |
| rds:DescribeGlobalClusters | List | 36 | 3 |
| rds:DescribeIntegrations | List | 33 | 3 |
| rds:DescribeOptionGroupOptions | List | 29 | 1 |
| rds:DescribeOptionGroups | List | 40 | 3 |
| rds:DescribeOrderableDBInstanceOptions | List | 40 | 1 |
| rds:DescribePendingMaintenanceActions | List | 34 | 1 |
| rds:DescribeRecommendationGroups | Read | 26 | 1 |
| rds:DescribeRecommendations | Read | 26 | 1 |
| rds:DescribeReservedDBInstances | List | 31 | 1 |
| rds:DescribeReservedDBInstancesOfferings | List | 29 | 1 |
| rds:DescribeSourceRegions | List | 28 | 1 |
| rds:DescribeTenantDatabases | List | 30 | 1 |
| rds:DescribeValidDBInstanceModifications | List | 32 | 1 |
| rds:DisableHttpEndpoint | Write | 9 | 3 |
| rds:DownloadCompleteDBLogFile | Read | 10 | 1 |
| rds:DownloadDBLogFilePortion | Read | 17 | 1 |
| rds:EnableHttpEndpoint | Write | 9 | 3 |
| rds:FailoverDBCluster | Write | 14 | 2 |
| rds:FailoverGlobalCluster | Write | 10 | 1 |
| rds:ListTagsForResource | Read | 41 | 5 |
| rds:ModifyActivityStream | Write | 9 | 1 |
| rds:ModifyCertificates | Write | 9 | 1 |
| rds:ModifyCurrentDBClusterCapacity | Write | 9 | 1 |
| rds:ModifyCustomDBEngineVersion | Write | 9 | 1 |
| rds:ModifyDBCapacityReservation | Write | 9 | 1 |
| rds:ModifyDBCluster | Write | 15 | 2 |
| rds:ModifyDBClusterEndpoint | Write | 11 | 1 |
| rds:ModifyDBClusterParameterGroup | Write | 14 | 1 |
| rds:ModifyDBClusterSnapshotAttribute | Write | 13 | 2 |
| rds:ModifyDBInstance | Write | 14 | 4 |
| rds:ModifyDBParameterGroup | Write | 14 | 1 |
| rds:ModifyDBProxy | Write | 9 | 1 |
| rds:ModifyDBProxyEndpoint | Write | 9 | 1 |
| rds:ModifyDBProxyTargetGroup | Write | 9 | 1 |
| rds:ModifyDBRecommendation | Write | 9 | 1 |
| rds:ModifyDBShardGroup | Write | 9 | 1 |
| rds:ModifyDBSnapshot | Write | 9 | 1 |
| rds:ModifyDBSnapshotAttribute | Write | 9 | 2 |
| rds:ModifyDBSubnetGroup | Write | 13 | 4 |
| rds:ModifyEventSubscription | Write | 13 | 1 |
| rds:ModifyGlobalCluster | Write | 11 | 1 |
| rds:ModifyIntegration | Write | 9 | 1 |
| rds:ModifyOptionGroup | Write | 9 | 1 |
| rds:ModifyRecommendation | Write | 9 | 1 |
| rds:ModifyTenantDatabase | Write | 9 | 1 |
| rds:PromoteReadReplica | Write | 9 | 1 |
| rds:PromoteReadReplicaDBCluster | Write | 13 | 1 |
| rds:PurchaseReservedDBInstancesOffering | Write | 9 | 1 |
| rds:RebootDBCluster | Write | 10 | 1 |
| rds:RebootDBInstance | Write | 14 | 2 |
| rds:RebootDBShardGroup | Write | 9 | 1 |
| rds:RegisterDBProxyTargets | Write | 9 | 1 |
| rds:RemoveFromGlobalCluster | Write | 11 | 1 |
| rds:RemoveRoleFromDBCluster | Write | 13 | 1 |
| rds:RemoveRoleFromDBInstance | Write | 9 | 1 |
| rds:RemoveSourceIdentifierFromSubscription | Write | 13 | 1 |
| rds:RemoveTagsFromResource | Tagging | 14 | 1 |
| rds:ResetDBClusterParameterGroup | Write | 14 | 1 |
| rds:ResetDBParameterGroup | Write | 14 | 1 |
| rds:RestoreDBClusterFromS3 | Write | 9 | 1 |
| rds:RestoreDBClusterFromSnapshot | Write | 16 | 1 |
| rds:RestoreDBClusterToPointInTime | Write | 16 | 1 |
| rds:RestoreDBInstanceFromDBSnapshot | Write | 10 | 2 |
| rds:RestoreDBInstanceFromS3 | Write | 9 | 1 |
| rds:RestoreDBInstanceToPointInTime | Write | 10 | 1 |
| rds:RevokeDBSecurityGroupIngress | Write | 9 | 1 |
| rds:StartActivityStream | Write | 9 | 1 |
| rds:StartDBCluster | Write | 11 | 1 |
| rds:StartDBInstance | Write | 10 | 2 |
| rds:StartDBInstanceAutomatedBackupsReplication | Write | 9 | 1 |
| rds:StartExportTask | Write | 9 | 1 |
| rds:StopActivityStream | Write | 9 | 1 |
| rds:StopDBCluster | Write | 11 | 1 |
| rds:StopDBInstance | Write | 10 | 2 |
| rds:StopDBInstanceAutomatedBackupsReplication | Write | 9 | 1 |
| rds:SwitchoverBlueGreenDeployment | Write | 9 | 1 |
| rds:SwitchoverGlobalCluster | Write | 9 | 1 |
| rds:SwitchoverReadReplica | Write | 9 | 1 |