Skip to content

Policy: AmazonDocDBElasticFullAccess

ARN: arn:aws:iam::aws:policy/AmazonDocDBElasticFullAccess

Allowed Actions

Actions Services
cloudwatch:GetMetricData cloudwatch
cloudwatch:GetMetricStatistics cloudwatch
cloudwatch:ListMetrics cloudwatch
docdb-elastic:ApplyPendingMaintenanceAction docdb-elastic
docdb-elastic:CopyClusterSnapshot docdb-elastic
docdb-elastic:CreateCluster docdb-elastic
docdb-elastic:CreateClusterSnapshot docdb-elastic
docdb-elastic:DeleteCluster docdb-elastic
docdb-elastic:DeleteClusterSnapshot docdb-elastic
docdb-elastic:GetCluster docdb-elastic
docdb-elastic:GetClusterSnapshot docdb-elastic
docdb-elastic:GetPendingMaintenanceAction docdb-elastic
docdb-elastic:ListClusterSnapshots docdb-elastic
docdb-elastic:ListClusters docdb-elastic
docdb-elastic:ListPendingMaintenanceActions docdb-elastic
docdb-elastic:ListTagsForResource docdb-elastic
docdb-elastic:RestoreClusterFromSnapshot docdb-elastic
docdb-elastic:StartCluster docdb-elastic
docdb-elastic:StopCluster docdb-elastic
docdb-elastic:TagResource docdb-elastic
docdb-elastic:UntagResource docdb-elastic
docdb-elastic:UpdateCluster docdb-elastic
ec2:CreateVpcEndpoint ec2
ec2:DeleteVpcEndpoints ec2
ec2:DescribeAvailabilityZones ec2
ec2:DescribeSecurityGroups ec2
ec2:DescribeSubnets ec2
ec2:DescribeVpcAttribute ec2
ec2:DescribeVpcEndpoints ec2
ec2:DescribeVpcs ec2
ec2:ModifyVpcEndpoint ec2
iam:CreateServiceLinkedRole iam
kms:CreateGrant kms
kms:Decrypt kms
kms:DescribeKey kms
kms:GenerateDataKey kms
secretsmanager:DescribeSecret secretsmanager
secretsmanager:GetResourcePolicy secretsmanager
secretsmanager:GetSecretValue secretsmanager
secretsmanager:ListSecretVersionIds secretsmanager
secretsmanager:ListSecrets secretsmanager