AWS Fundamentals Logo
AWS Fundamentals
rds:*

AWS Amazon RDS IAM Actions

169 IAM actions for rds:*

Actions

169 actions available. Filter by access level or search by name.

Filter:
ActionAccess Level
rds:AddRoleToDBCluster
Permissions
rds:AddRoleToDBInstance
Permissions
rds:AddSourceIdentifierToSubscription
Write
rds:AddTagsToResource
Tagging
rds:ApplyPendingMaintenanceAction
Read
rds:AuthorizeDBSecurityGroupIngress
Read
rds:BacktrackDBCluster
Read
rds:CancelExportTask
Write
rds:CopyCustomDBEngineVersion
Write
rds:CopyDBClusterParameterGroup
Write
rds:CopyDBClusterSnapshot
Write
rds:CopyDBParameterGroup
Write
rds:CopyDBSnapshot
Write
rds:CopyOptionGroup
Write
rds:CreateBlueGreenDeployment
Write
rds:CreateCustomDBEngineVersion
Write
rds:CreateDBCluster
Write
rds:CreateDBClusterEndpoint
Write
rds:CreateDBClusterParameterGroup
Write
rds:CreateDBClusterSnapshot
Write
rds:CreateDBInstance
Write
rds:CreateDBInstanceReadReplica
Write
rds:CreateDBParameterGroup
Write
rds:CreateDBProxy
Write
rds:CreateDBProxyEndpoint
Write
rds:CreateDBSecurityGroup
Write
rds:CreateDBShardGroup
Write
rds:CreateDBSnapshot
Write
rds:CreateDBSubnetGroup
Write
rds:CreateEventSubscription
Write
rds:CreateGlobalCluster
Write
rds:CreateIntegration
Write
rds:CreateOptionGroup
Write
rds:CreateTenantDatabase
Write
rds:CrossRegionCommunication
Read
rds:DeleteBlueGreenDeployment
Write
rds:DeleteCustomDBEngineVersion
Write
rds:DeleteDBCluster
Write
rds:DeleteDBClusterAutomatedBackup
Write
rds:DeleteDBClusterEndpoint
Write
rds:DeleteDBClusterParameterGroup
Write
rds:DeleteDBClusterSnapshot
Write
rds:DeleteDBInstance
Write
rds:DeleteDBInstanceAutomatedBackup
Write
rds:DeleteDBParameterGroup
Write
rds:DeleteDBProxy
Write
rds:DeleteDBProxyEndpoint
Write
rds:DeleteDBSecurityGroup
Write
rds:DeleteDBShardGroup
Write
rds:DeleteDBSnapshot
Write
rds:DeleteDBSubnetGroup
Write
rds:DeleteEventSubscription
Write
rds:DeleteGlobalCluster
Write
rds:DeleteIntegration
Write
rds:DeleteOptionGroup
Write
rds:DeleteTenantDatabase
Write
rds:DeregisterDBProxyTargets
Write
rds:DescribeAccountAttributes
Read
rds:DescribeBlueGreenDeployments
Read
rds:DescribeCertificates
Read
rds:DescribeDBClusterAutomatedBackups
Read
rds:DescribeDBClusterBacktracks
Read
rds:DescribeDBClusterEndpoints
Read
rds:DescribeDBClusterParameterGroups
Read
rds:DescribeDBClusterParameters
Read
rds:DescribeDBClusters
Read
rds:DescribeDBClusterSnapshotAttributes
Read
rds:DescribeDBClusterSnapshots
Read
rds:DescribeDBEngineVersions
Read
rds:DescribeDBInstanceAutomatedBackups
Read
rds:DescribeDBInstances
Read
rds:DescribeDBLogFiles
Read
rds:DescribeDBMajorEngineVersions
Read
rds:DescribeDBParameterGroups
Read
rds:DescribeDBParameters
Read
rds:DescribeDBProxies
Read
rds:DescribeDBProxyEndpoints
Read
rds:DescribeDBProxyTargetGroups
Read
rds:DescribeDBProxyTargets
Read
rds:DescribeDBRecommendations
Read
rds:DescribeDBSecurityGroups
Read
rds:DescribeDBShardGroups
Read
rds:DescribeDBSnapshotAttributes
Read
rds:DescribeDBSnapshots
Read
rds:DescribeDBSnapshotTenantDatabases
Read
rds:DescribeDBSubnetGroups
Read
rds:DescribeEngineDefaultClusterParameters
Read
rds:DescribeEngineDefaultParameters
Read
rds:DescribeEventCategories
Read
rds:DescribeEvents
Read
rds:DescribeEventSubscriptions
Read
rds:DescribeExportTasks
Read
rds:DescribeGlobalClusters
Read
rds:DescribeIntegrations
Read
rds:DescribeOptionGroupOptions
Read
rds:DescribeOptionGroups
Read
rds:DescribeOrderableDBInstanceOptions
Read
rds:DescribePendingMaintenanceActions
Read
rds:DescribeRecommendationGroups
Read
rds:DescribeRecommendations
Read
rds:DescribeReservedDBInstances
Read
rds:DescribeReservedDBInstancesOfferings
Read
rds:DescribeSourceRegions
Read
rds:DescribeTenantDatabases
Read
rds:DescribeValidDBInstanceModifications
Read
rds:DisableHttpEndpoint
Write
rds:DownloadCompleteDBLogFile
Read
rds:DownloadDBLogFilePortion
Read
rds:EnableHttpEndpoint
Write
rds:FailoverDBCluster
Read
rds:FailoverGlobalCluster
Read
rds:ListTagsForResource
Tagging
rds:ModifyActivityStream
Write
rds:ModifyCertificates
Write
rds:ModifyCurrentDBClusterCapacity
Write
rds:ModifyCustomDBEngineVersion
Write
rds:ModifyDBCluster
Write
rds:ModifyDBClusterEndpoint
Write
rds:ModifyDBClusterParameterGroup
Write
rds:ModifyDBClusterSnapshotAttribute
Write
rds:ModifyDBInstance
Write
rds:ModifyDBParameterGroup
Write
rds:ModifyDBProxy
Write
rds:ModifyDBProxyEndpoint
Write
rds:ModifyDBProxyTargetGroup
Write
rds:ModifyDBRecommendation
Write
rds:ModifyDBShardGroup
Write
rds:ModifyDBSnapshot
Write
rds:ModifyDBSnapshotAttribute
Write
rds:ModifyDBSubnetGroup
Write
rds:ModifyEventSubscription
Write
rds:ModifyGlobalCluster
Write
rds:ModifyIntegration
Write
rds:ModifyOptionGroup
Write
rds:ModifyRecommendation
Write
rds:ModifyTenantDatabase
Write
rds:PromoteReadReplica
Read
rds:PromoteReadReplicaDBCluster
Read
rds:PurchaseReservedDBInstancesOffering
Read
rds:RebootDBCluster
Write
rds:RebootDBInstance
Write
rds:RebootDBShardGroup
Write
rds:RegisterDBProxyTargets
Write
rds:RemoveFromGlobalCluster
Write
rds:RemoveRoleFromDBCluster
Permissions
rds:RemoveRoleFromDBInstance
Permissions
rds:RemoveSourceIdentifierFromSubscription
Write
rds:RemoveTagsFromResource
Tagging
rds:ResetDBClusterParameterGroup
Write
rds:ResetDBParameterGroup
Write
rds:RestoreDBClusterFromS3
Write
rds:RestoreDBClusterFromSnapshot
Write
rds:RestoreDBClusterToPointInTime
Write
rds:RestoreDBInstanceFromDBSnapshot
Write
rds:RestoreDBInstanceFromS3
Write
rds:RestoreDBInstanceToPointInTime
Write
rds:RevokeDBSecurityGroupIngress
Write
rds:StartActivityStream
Write
rds:StartDBCluster
Write
rds:StartDBInstance
Write
rds:StartDBInstanceAutomatedBackupsReplication
Write
rds:StartExportTask
Write
rds:StopActivityStream
Write
rds:StopDBCluster
Write
rds:StopDBInstance
Write
rds:StopDBInstanceAutomatedBackupsReplication
Write
rds:SwitchoverBlueGreenDeployment
Read
rds:SwitchoverGlobalCluster
Read
rds:SwitchoverReadReplica
Read

Resource Types

ARN patterns for resources in this service.

ResourceARN Pattern
${RelativeId}arn:aws:rds:${Region}:${Account}:${RelativeId}

Condition Keys

Condition keys you can use in IAM policy conditions for this service.

aws:RequestTag/${TagKey}aws:ResourceTag/${TagKey}aws:TagKeysrds:BackupTargetrds:CopyOptionGrouprds:DatabaseClassrds:DatabaseEnginerds:DatabaseNamerds:EndpointTyperds:ManageMasterUserPasswordrds:MultiAzrds:Piopsrds:PubliclyAccessiblerds:StorageEncryptedrds:StorageSizerds:TagsFromRequestrds:TenantDatabaseNamerds:Vpcrds:cluster-pg-tag/${TagKey}rds:cluster-snapshot-tag/${TagKey}rds:cluster-tag/${TagKey}rds:db-tag/${TagKey}rds:es-tag/${TagKey}rds:og-tag/${TagKey}rds:pg-tag/${TagKey}rds:req-tag/${TagKey}rds:ri-tag/${TagKey}rds:secgrp-tag/${TagKey}rds:snapshot-tag/${TagKey}rds:subgrp-tag/${TagKey}

Get the Amazon RDS Cheat Sheet

Everything you need to know about Amazon RDS on one page. HD quality, print-friendly.

Download Free Infographic

Get the Amazon RDS Cheat Sheet

Everything you need to know about Amazon RDS on one page. HD quality, print-friendly.

Download Free Infographic

Quick Facts

Total Actions169
Prefixrds
Resource Types1
Condition Keys30

Access Level Breakdown

Read
62
Write
100
Permissions
4
Tagging
3