Skip to content

Service: rds

Attached Policies

Policy ARN Policy Name
arn:aws:iam::aws:policy/ReadOnlyAccess ReadOnlyAccess
arn:aws:iam::aws:policy/AmazonRDSFullAccess AmazonRDSFullAccess
arn:aws:iam::aws:policy/AmazonRDSReadOnlyAccess AmazonRDSReadOnlyAccess
arn:aws:iam::aws:policy/SecurityAudit SecurityAudit
arn:aws:iam::aws:policy/service-role/AmazonElasticMapReduceforEC2Role AmazonElasticMapReduceforEC2Role
arn:aws:iam::aws:policy/service-role/AmazonEC2RoleforDataPipelineRole AmazonEC2RoleforDataPipelineRole
arn:aws:iam::aws:policy/service-role/AWSQuickSightDescribeRDS AWSQuickSightDescribeRDS
arn:aws:iam::aws:policy/service-role/AWSElasticBeanstalkService AWSElasticBeanstalkService
arn:aws:iam::aws:policy/job-function/ViewOnlyAccess ViewOnlyAccess
arn:aws:iam::aws:policy/job-function/SupportUser SupportUser
arn:aws:iam::aws:policy/job-function/SystemAdministrator SystemAdministrator
arn:aws:iam::aws:policy/job-function/DatabaseAdministrator DatabaseAdministrator
arn:aws:iam::aws:policy/job-function/DataScientist DataScientist
arn:aws:iam::aws:policy/AWSDataPipeline_FullAccess AWSDataPipeline_FullAccess
arn:aws:iam::aws:policy/AWSDataPipeline_PowerUser AWSDataPipeline_PowerUser
arn:aws:iam::aws:policy/AWSGlueConsoleFullAccess AWSGlueConsoleFullAccess
arn:aws:iam::aws:policy/aws-service-role/AWSApplicationAutoscalingRDSClusterPolicy AWSApplicationAutoscalingRDSClusterPolicy
arn:aws:iam::aws:policy/aws-service-role/AmazonRDSServiceRolePolicy AmazonRDSServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AWSTrustedAdvisorServiceRolePolicy AWSTrustedAdvisorServiceRolePolicy
arn:aws:iam::aws:policy/AWSResourceGroupsReadOnlyAccess AWSResourceGroupsReadOnlyAccess
arn:aws:iam::aws:policy/SecretsManagerReadWrite SecretsManagerReadWrite
arn:aws:iam::aws:policy/NeptuneReadOnlyAccess NeptuneReadOnlyAccess
arn:aws:iam::aws:policy/NeptuneFullAccess NeptuneFullAccess
arn:aws:iam::aws:policy/aws-service-role/AWSConfigServiceRolePolicy AWSConfigServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AmazonRDSPreviewServiceRolePolicy AmazonRDSPreviewServiceRolePolicy
arn:aws:iam::aws:policy/NeptuneConsoleFullAccess NeptuneConsoleFullAccess
arn:aws:iam::aws:policy/AWSGlueConsoleSageMakerNotebookFullAccess AWSGlueConsoleSageMakerNotebookFullAccess
arn:aws:iam::aws:policy/aws-service-role/CloudwatchApplicationInsightsServiceLinkedRolePolicy CloudwatchApplicationInsightsServiceLinkedRolePolicy
arn:aws:iam::aws:policy/AmazonDocDBFullAccess AmazonDocDBFullAccess
arn:aws:iam::aws:policy/AmazonDocDBReadOnlyAccess AmazonDocDBReadOnlyAccess
arn:aws:iam::aws:policy/AmazonDocDBConsoleFullAccess AmazonDocDBConsoleFullAccess
arn:aws:iam::aws:policy/service-role/AWSBackupServiceRolePolicyForBackup AWSBackupServiceRolePolicyForBackup
arn:aws:iam::aws:policy/service-role/AWSBackupServiceRolePolicyForRestores AWSBackupServiceRolePolicyForRestores
arn:aws:iam::aws:policy/ServiceQuotasReadOnlyAccess ServiceQuotasReadOnlyAccess
arn:aws:iam::aws:policy/ServiceQuotasFullAccess ServiceQuotasFullAccess
arn:aws:iam::aws:policy/CloudWatchAutomaticDashboardsAccess CloudWatchAutomaticDashboardsAccess
arn:aws:iam::aws:policy/AWSBackupFullAccess AWSBackupFullAccess
arn:aws:iam::aws:policy/AWSBackupOperatorAccess AWSBackupOperatorAccess
arn:aws:iam::aws:policy/aws-service-role/AWSElasticBeanstalkManagedUpdatesServiceRolePolicy AWSElasticBeanstalkManagedUpdatesServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AccessAnalyzerServiceRolePolicy AccessAnalyzerServiceRolePolicy
arn:aws:iam::aws:policy/ComputeOptimizerReadOnlyAccess ComputeOptimizerReadOnlyAccess
arn:aws:iam::aws:policy/aws-service-role/AWSBackupServiceLinkedRolePolicyForBackup AWSBackupServiceLinkedRolePolicyForBackup
arn:aws:iam::aws:policy/service-role/AWSElasticBeanstalkRoleRDS AWSElasticBeanstalkRoleRDS
arn:aws:iam::aws:policy/service-role/AWSElasticBeanstalkRoleCore AWSElasticBeanstalkRoleCore
arn:aws:iam::aws:policy/service-role/AWS_ConfigRole AWS_ConfigRole
arn:aws:iam::aws:policy/aws-service-role/AWSSupportServiceRolePolicy AWSSupportServiceRolePolicy
arn:aws:iam::aws:policy/AWSBudgetsActionsWithAWSResourceControlAccess AWSBudgetsActionsWithAWSResourceControlAccess
arn:aws:iam::aws:policy/CloudWatchApplicationInsightsFullAccess CloudWatchApplicationInsightsFullAccess
arn:aws:iam::aws:policy/aws-service-role/AmazonDevOpsGuruServiceRolePolicy AmazonDevOpsGuruServiceRolePolicy
arn:aws:iam::aws:policy/AmazonDevOpsGuruReadOnlyAccess AmazonDevOpsGuruReadOnlyAccess
arn:aws:iam::aws:policy/AmazonDevOpsGuruFullAccess AmazonDevOpsGuruFullAccess
arn:aws:iam::aws:policy/aws-service-role/AWSAuditManagerServiceRolePolicy AWSAuditManagerServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AmazonFISServiceRolePolicy AmazonFISServiceRolePolicy
arn:aws:iam::aws:policy/AWSElasticBeanstalkReadOnly AWSElasticBeanstalkReadOnly
arn:aws:iam::aws:policy/AdministratorAccess-AWSElasticBeanstalk AdministratorAccess-AWSElasticBeanstalk
arn:aws:iam::aws:policy/AWSElasticBeanstalkManagedUpdatesCustomerRolePolicy AWSElasticBeanstalkManagedUpdatesCustomerRolePolicy
arn:aws:iam::aws:policy/aws-service-role/Route53RecoveryReadinessServiceRolePolicy Route53RecoveryReadinessServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AWSApplicationAutoscalingNeptuneClusterPolicy AWSApplicationAutoscalingNeptuneClusterPolicy
arn:aws:iam::aws:policy/aws-service-role/AmazonRDSCustomServiceRolePolicy AmazonRDSCustomServiceRolePolicy
arn:aws:iam::aws:policy/AmazonDevOpsGuruConsoleFullAccess AmazonDevOpsGuruConsoleFullAccess
arn:aws:iam::aws:policy/AmazonRDSPerformanceInsightsReadOnly AmazonRDSPerformanceInsightsReadOnly
arn:aws:iam::aws:policy/AWSBudgetsActions_RolePolicyForResourceAdministrationWithSSM AWSBudgetsActions_RolePolicyForResourceAdministrationWithSSM
arn:aws:iam::aws:policy/AmazonSageMakerCanvasFullAccess AmazonSageMakerCanvasFullAccess
arn:aws:iam::aws:policy/aws-service-role/AWSResourceExplorerServiceRolePolicy AWSResourceExplorerServiceRolePolicy
arn:aws:iam::aws:policy/service-role/AWSFaultInjectionSimulatorRDSAccess AWSFaultInjectionSimulatorRDSAccess
arn:aws:iam::aws:policy/VPCLatticeReadOnlyAccess VPCLatticeReadOnlyAccess
arn:aws:iam::aws:policy/VPCLatticeFullAccess VPCLatticeFullAccess
arn:aws:iam::aws:policy/AWSResilienceHubAsssessmentExecutionPolicy AWSResilienceHubAsssessmentExecutionPolicy
arn:aws:iam::aws:policy/AmazonRDSPerformanceInsightsFullAccess AmazonRDSPerformanceInsightsFullAccess
arn:aws:iam::aws:policy/service-role/AmplifyBackendDeployFullAccess AmplifyBackendDeployFullAccess
arn:aws:iam::aws:policy/AmazonSageMakerCanvasDataPrepFullAccess AmazonSageMakerCanvasDataPrepFullAccess
arn:aws:iam::aws:policy/aws-service-role/AWSServiceRolePolicyForBackupRestoreTesting AWSServiceRolePolicyForBackupRestoreTesting
arn:aws:iam::aws:policy/AmazonDataZoneSageMakerEnvironmentRolePermissionsBoundary AmazonDataZoneSageMakerEnvironmentRolePermissionsBoundary
arn:aws:iam::aws:policy/ResourceGroupsTaggingAPITagUntagSupportedResources ResourceGroupsTaggingAPITagUntagSupportedResources
arn:aws:iam::aws:policy/AWSPartnerLedSupportReadOnlyAccess AWSPartnerLedSupportReadOnlyAccess
arn:aws:iam::aws:policy/AIOpsAssistantPolicy AIOpsAssistantPolicy

Allowed Actions

Action Service
rds:* rds
rds:*DBSubnetGroup rds
rds:AddRoleToDBCluster rds
rds:AddSourceIdentifierToSubscription rds
rds:AddTagsToResource rds
rds:ApplyPendingMaintenanceAction rds
rds:AuthorizeDBSecurityGroupIngress rds
rds:CopyDBClusterParameterGroup rds
rds:CopyDBClusterSnapshot rds
rds:CopyDBParameterGroup rds
rds:CopyDBSnapshot rds
rds:CreateDBCluster rds
rds:CreateDBClusterEndpoint rds
rds:CreateDBClusterParameterGroup rds
rds:CreateDBClusterSnapshot rds
rds:CreateDBInstance rds
rds:CreateDBParameterGroup rds
rds:CreateDBSecurityGroup rds
rds:CreateDBSnapshot rds
rds:CreateDBSubnetGroup rds
rds:CreateEventSubscription rds
rds:CreateGlobalCluster rds
rds:CreateTenantDatabase rds
rds:CrossRegionCommunication rds
rds:DeleteDBCluster rds
rds:DeleteDBClusterAutomatedBackup rds
rds:DeleteDBClusterEndpoint rds
rds:DeleteDBClusterParameterGroup rds
rds:DeleteDBClusterSnapshot rds
rds:DeleteDBInstance rds
rds:DeleteDBInstanceAutomatedBackup rds
rds:DeleteDBParameterGroup rds
rds:DeleteDBSecurityGroup rds
rds:DeleteDBSnapshot rds
rds:DeleteDBSubnetGroup rds
rds:DeleteEventSubscription rds
rds:DeleteGlobalCluster rds
rds:DeleteTenantDatabase rds
rds:Describe* rds
rds:DescribeAccountAttributes rds
rds:DescribeBlueGreenDeployments rds
rds:DescribeCertificates rds
rds:DescribeDBClusterAutomatedBackups rds
rds:DescribeDBClusterEndpoints rds
rds:DescribeDBClusterParameterGroups rds
rds:DescribeDBClusterParameters rds
rds:DescribeDBClusterSnapshotAttributes rds
rds:DescribeDBClusterSnapshots rds
rds:DescribeDBClusters rds
rds:DescribeDBEngineVersions rds
rds:DescribeDBInstanceAutomatedBackups rds
rds:DescribeDBInstances rds
rds:DescribeDBLogFiles rds
rds:DescribeDBParameterGroups rds
rds:DescribeDBParameters rds
rds:DescribeDBProxies rds
rds:DescribeDBProxyEndpoints rds
rds:DescribeDBProxyTargetGroups rds
rds:DescribeDBProxyTargets rds
rds:DescribeDBSecurityGroups rds
rds:DescribeDBSnapshotAttributes rds
rds:DescribeDBSnapshots rds
rds:DescribeDBSubnetGroups rds
rds:DescribeEngineDefaultClusterParameters rds
rds:DescribeEngineDefaultParameters rds
rds:DescribeEventCategories rds
rds:DescribeEventSubscriptions rds
rds:DescribeEvents rds
rds:DescribeGlobalClusters rds
rds:DescribeOptionGroupOptions rds
rds:DescribeOptionGroups rds
rds:DescribeOrderableDBInstanceOptions rds
rds:DescribePendingMaintenanceActions rds
rds:DescribeReservedDBInstances rds
rds:DescribeReservedDBInstancesOfferings rds
rds:DescribeValidDBInstanceModifications rds
rds:Download* rds
rds:DownloadDBLogFilePortion rds
rds:FailoverDBCluster rds
rds:FailoverGlobalCluster rds
rds:List* rds
rds:ListTagsForResource rds
rds:ModifyDBCluster rds
rds:ModifyDBClusterEndpoint rds
rds:ModifyDBClusterParameterGroup rds
rds:ModifyDBClusterSnapshotAttribute rds
rds:ModifyDBInstance rds
rds:ModifyDBParameterGroup rds
rds:ModifyDBSnapshotAttribute rds
rds:ModifyDBSubnetGroup rds
rds:ModifyEventSubscription rds
rds:ModifyGlobalCluster rds
rds:PromoteReadReplicaDBCluster rds
rds:RebootDBInstance rds
rds:RemoveFromGlobalCluster rds
rds:RemoveRoleFromDBCluster rds
rds:RemoveSourceIdentifierFromSubscription rds
rds:RemoveTagsFromResource rds
rds:ResetDBClusterParameterGroup rds
rds:ResetDBParameterGroup rds
rds:RestoreDBClusterFromSnapshot rds
rds:RestoreDBClusterToPointInTime rds
rds:RestoreDBInstanceFromDBSnapshot rds
rds:RestoreDBInstanceToPointInTime rds
rds:StartDBCluster rds
rds:StartDBInstance rds
rds:StopDBCluster rds
rds:StopDBInstance rds
rds:describeAccountAttributes rds
rds:describeBlueGreenDeployments rds
rds:describeCertificates rds
rds:describeDBClusterEndpoints rds
rds:describeDBClusterParameterGroups rds
rds:describeDBClusterParameters rds
rds:describeDBClusterSnapshots rds
rds:describeDBClusters rds
rds:describeDBEngineVersions rds
rds:describeDBInstanceAutomatedBackups rds
rds:describeDBInstances rds
rds:describeDBLogFiles rds
rds:describeDBParameterGroups rds
rds:describeDBParameters rds
rds:describeDBSecurityGroups rds
rds:describeDBSnapshotAttributes rds
rds:describeDBSnapshots rds
rds:describeDBSubnetGroups rds
rds:describeEngineDefaultClusterParameters rds
rds:describeEngineDefaultParameters rds
rds:describeEventCategories rds
rds:describeEventSubscriptions rds
rds:describeEvents rds
rds:describeExportTasks rds
rds:describeGlobalClusters rds
rds:describeIntegrations rds
rds:describeOptionGroupOptions rds
rds:describeOptionGroups rds
rds:describeOrderableDBInstanceOptions rds
rds:describePendingMaintenanceActions rds
rds:describeReservedDBInstances rds
rds:describeReservedDBInstancesOfferings rds
rds:describeSourceRegions rds
rds:describeValidDBInstanceModifications rds
rds:listTagsForResource rds