Policy: AmazonRDSCustomServiceRolePolicy ARN: arn:aws:iam::aws:policy/aws-service-role/AmazonRDSCustomServiceRolePolicy Allowed Actions Actions Services cloudtrail:GetTrailStatus cloudtrail cloudwatch:DeleteAlarms cloudwatch cloudwatch:DescribeAlarms cloudwatch cloudwatch:EnableAlarmActions cloudwatch cloudwatch:PutMetricAlarm cloudwatch cloudwatch:TagResource cloudwatch ec2:AllocateAddress ec2 ec2:AssignPrivateIpAddresses ec2 ec2:AssociateAddress ec2 ec2:AssociateIamInstanceProfile ec2 ec2:AttachVolume ec2 ec2:CopyImage ec2 ec2:CopySnapshot ec2 ec2:CreateKeyPair ec2 ec2:CreateNetworkInterface ec2 ec2:CreateNetworkInterface ec2 ec2:CreateSnapshot ec2 ec2:CreateSnapshot ec2 ec2:CreateSnapshots ec2 ec2:CreateSnapshots ec2 ec2:CreateTags ec2 ec2:CreateTags ec2 ec2:CreateVolume ec2 ec2:CreateVolume ec2 ec2:DeleteKeyPair ec2 ec2:DeleteNetworkInterface ec2 ec2:DeleteSnapshot ec2 ec2:DeleteVolume ec2 ec2:DeregisterImage ec2 ec2:DescribeIamInstanceProfileAssociations ec2 ec2:DescribeImages ec2 ec2:DescribeInstanceAttribute ec2 ec2:DescribeInstanceStatus ec2 ec2:DescribeInstanceTypes ec2 ec2:DescribeInstances ec2 ec2:DescribeNetworkInterfaces ec2 ec2:DescribePlacementGroups ec2 ec2:DescribeRegions ec2 ec2:DescribeRouteTables ec2 ec2:DescribeSecurityGroups ec2 ec2:DescribeSnapshots ec2 ec2:DescribeSubnets ec2 ec2:DescribeTags ec2 ec2:DescribeTransitGatewayMulticastDomains ec2 ec2:DescribeTransitGatewayVpcAttachments ec2 ec2:DescribeTransitGateways ec2 ec2:DescribeVolumes ec2 ec2:DescribeVolumesModifications ec2 ec2:DescribeVpcAttribute ec2 ec2:DescribeVpcs ec2 ec2:DetachVolume ec2 ec2:DisassociateAddress ec2 ec2:DisassociateIamInstanceProfile ec2 ec2:GetTransitGatewayMulticastDomainAssociations ec2 ec2:ModifyInstanceAttribute ec2 ec2:ModifyVolume ec2 ec2:ModifyVolumeAttribute ec2 ec2:RebootInstances ec2 ec2:RegisterImage ec2 ec2:ReleaseAddress ec2 ec2:ReplaceIamInstanceProfileAssociation ec2 ec2:RunInstances ec2 ec2:RunInstances ec2 ec2:RunInstances ec2 ec2:RunInstances ec2 ec2:RunInstances ec2 ec2:SearchTransitGatewayMulticastGroups ec2 ec2:StartInstances ec2 ec2:StopInstances ec2 ec2:TerminateInstances ec2 events:DeleteRule events events:DeleteRule events events:DescribeRule events events:DescribeRule events events:DisableRule events events:DisableRule events events:EnableRule events events:EnableRule events events:ListTargetsByRule events events:ListTargetsByRule events events:PutRule events events:PutRule events events:PutTargets events events:PutTargets events events:RemoveTargets events events:RemoveTargets events events:TagResource events iam:GetInstanceProfile iam iam:GetPolicy iam iam:GetPolicyVersion iam iam:GetRole iam iam:GetRolePolicy iam iam:ListAttachedRolePolicies iam iam:ListInstanceProfiles iam iam:ListRolePolicies iam iam:PassRole iam rds:CrossRegionCommunication rds secretsmanager:CreateSecret secretsmanager secretsmanager:DeleteSecret secretsmanager secretsmanager:DescribeSecret secretsmanager secretsmanager:ListSecrets secretsmanager secretsmanager:PutSecretValue secretsmanager secretsmanager:RestoreSecret secretsmanager secretsmanager:TagResource secretsmanager secretsmanager:TagResource secretsmanager servicequotas:GetServiceQuota servicequotas sqs:CreateQueue sqs sqs:DeleteMessage sqs sqs:DeleteQueue sqs sqs:GetQueueAttributes sqs sqs:ReceiveMessage sqs sqs:SendMessage sqs sqs:TagQueue sqs ssm:AddTagsToResource ssm ssm:DeleteParameter ssm ssm:DescribeInstanceInformation ssm ssm:GetCommandInvocation ssm ssm:GetConnectionStatus ssm ssm:PutParameter ssm ssm:SendCommand ssm ssm:SendCommand ssm