Policy: AmazonDocDBFullAccess ARN: arn:aws:iam::aws:policy/AmazonDocDBFullAccess Allowed Actions Actions Services cloudwatch:GetMetricStatistics cloudwatch cloudwatch:ListMetrics cloudwatch ec2:DescribeAccountAttributes ec2 ec2:DescribeAvailabilityZones ec2 ec2:DescribeSecurityGroups ec2 ec2:DescribeSubnets ec2 ec2:DescribeVpcAttribute ec2 ec2:DescribeVpcs ec2 iam:CreateServiceLinkedRole iam kms:ListAliases kms kms:ListKeyPolicies kms kms:ListKeys kms kms:ListRetirableGrants kms logs:DescribeLogStreams logs logs:GetLogEvents logs rds:AddRoleToDBCluster rds rds:AddSourceIdentifierToSubscription rds rds:AddTagsToResource rds rds:ApplyPendingMaintenanceAction rds rds:CopyDBClusterParameterGroup rds rds:CopyDBClusterSnapshot rds rds:CopyDBParameterGroup rds rds:CreateDBCluster rds rds:CreateDBClusterParameterGroup rds rds:CreateDBClusterSnapshot rds rds:CreateDBInstance rds rds:CreateDBParameterGroup rds rds:CreateDBSubnetGroup rds rds:CreateEventSubscription rds rds:DeleteDBCluster rds rds:DeleteDBClusterParameterGroup rds rds:DeleteDBClusterSnapshot rds rds:DeleteDBInstance rds rds:DeleteDBParameterGroup rds rds:DeleteDBSubnetGroup rds rds:DeleteEventSubscription rds rds:DescribeAccountAttributes rds rds:DescribeCertificates rds rds:DescribeDBClusterParameterGroups rds rds:DescribeDBClusterParameters rds rds:DescribeDBClusterSnapshotAttributes rds rds:DescribeDBClusterSnapshots rds rds:DescribeDBClusters rds rds:DescribeDBEngineVersions rds rds:DescribeDBInstances rds rds:DescribeDBLogFiles rds rds:DescribeDBParameterGroups rds rds:DescribeDBParameters rds rds:DescribeDBSecurityGroups rds rds:DescribeDBSubnetGroups rds rds:DescribeEngineDefaultClusterParameters rds rds:DescribeEngineDefaultParameters rds rds:DescribeEventCategories rds rds:DescribeEventSubscriptions rds rds:DescribeEvents rds rds:DescribeOptionGroups rds rds:DescribeOrderableDBInstanceOptions rds rds:DescribePendingMaintenanceActions rds rds:DescribeValidDBInstanceModifications rds rds:DownloadDBLogFilePortion rds rds:FailoverDBCluster rds rds:ListTagsForResource rds rds:ModifyDBCluster rds rds:ModifyDBClusterParameterGroup rds rds:ModifyDBClusterSnapshotAttribute rds rds:ModifyDBInstance rds rds:ModifyDBParameterGroup rds rds:ModifyDBSubnetGroup rds rds:ModifyEventSubscription rds rds:PromoteReadReplicaDBCluster rds rds:RebootDBInstance rds rds:RemoveRoleFromDBCluster rds rds:RemoveSourceIdentifierFromSubscription rds rds:RemoveTagsFromResource rds rds:ResetDBClusterParameterGroup rds rds:ResetDBParameterGroup rds rds:RestoreDBClusterFromSnapshot rds rds:RestoreDBClusterToPointInTime rds sns:ListSubscriptions sns sns:ListTopics sns sns:Publish sns