Policy: AmazonDocDBElasticFullAccess ARN: arn:aws:iam::aws:policy/AmazonDocDBElasticFullAccess Allowed Actions Actions Services cloudwatch:GetMetricData cloudwatch cloudwatch:GetMetricStatistics cloudwatch cloudwatch:ListMetrics cloudwatch docdb-elastic:ApplyPendingMaintenanceAction docdb-elastic docdb-elastic:CopyClusterSnapshot docdb-elastic docdb-elastic:CreateCluster docdb-elastic docdb-elastic:CreateClusterSnapshot docdb-elastic docdb-elastic:DeleteCluster docdb-elastic docdb-elastic:DeleteClusterSnapshot docdb-elastic docdb-elastic:GetCluster docdb-elastic docdb-elastic:GetClusterSnapshot docdb-elastic docdb-elastic:GetPendingMaintenanceAction docdb-elastic docdb-elastic:ListClusterSnapshots docdb-elastic docdb-elastic:ListClusters docdb-elastic docdb-elastic:ListPendingMaintenanceActions docdb-elastic docdb-elastic:ListTagsForResource docdb-elastic docdb-elastic:RestoreClusterFromSnapshot docdb-elastic docdb-elastic:StartCluster docdb-elastic docdb-elastic:StopCluster docdb-elastic docdb-elastic:TagResource docdb-elastic docdb-elastic:UntagResource docdb-elastic docdb-elastic:UpdateCluster docdb-elastic ec2:CreateVpcEndpoint ec2 ec2:DeleteVpcEndpoints ec2 ec2:DescribeAvailabilityZones ec2 ec2:DescribeSecurityGroups ec2 ec2:DescribeSubnets ec2 ec2:DescribeVpcAttribute ec2 ec2:DescribeVpcEndpoints ec2 ec2:DescribeVpcs ec2 ec2:ModifyVpcEndpoint ec2 iam:CreateServiceLinkedRole iam kms:CreateGrant kms kms:Decrypt kms kms:DescribeKey kms kms:GenerateDataKey kms secretsmanager:DescribeSecret secretsmanager secretsmanager:GetResourcePolicy secretsmanager secretsmanager:GetSecretValue secretsmanager secretsmanager:ListSecretVersionIds secretsmanager secretsmanager:ListSecrets secretsmanager