本文属于机器翻译版本。若本译文内容与英语原文存在差异,则一律以英文原文为准。
AmazonRDSFullAccess
描述:通过提供对 Amazon RDS 的完全访问权限 AWS Management Console。
AmazonRDSFullAccess
是一个AWS 托管策略。
使用此策略
您可以将 AmazonRDSFullAccess
附加到您的用户、组和角色。
策略详细信息
-
类型: AWS 托管策略
-
创建时间:2015 年 2 月 6 日 18:40 UTC
-
编辑时间:2023 年 8 月 17 日 23:00 UTC
-
ARN:
arn:aws:iam::aws:policy/AmazonRDSFullAccess
策略版本
策略版本:v14(默认)
此策略的默认版本是定义策略权限的版本。当使用该策略的用户或角色请求访问 AWS 资源时, AWS 会检查策略的默认版本以确定是否允许该请求。
JSON 策略文档
{ "Version" : "2012-10-17", "Statement" : [ { "Effect" : "Allow", "Action" : [ "rds:*", "application-autoscaling:DeleteScalingPolicy", "application-autoscaling:DeregisterScalableTarget", "application-autoscaling:DescribeScalableTargets", "application-autoscaling:DescribeScalingActivities", "application-autoscaling:DescribeScalingPolicies", "application-autoscaling:PutScalingPolicy", "application-autoscaling:RegisterScalableTarget", "cloudwatch:DescribeAlarms", "cloudwatch:GetMetricStatistics", "cloudwatch:PutMetricAlarm", "cloudwatch:DeleteAlarms", "cloudwatch:ListMetrics", "cloudwatch:GetMetricData", "ec2:DescribeAccountAttributes", "ec2:DescribeAvailabilityZones", "ec2:DescribeCoipPools", "ec2:DescribeInternetGateways", "ec2:DescribeLocalGatewayRouteTablePermissions", "ec2:DescribeLocalGatewayRouteTables", "ec2:DescribeLocalGatewayRouteTableVpcAssociations", "ec2:DescribeLocalGateways", "ec2:DescribeSecurityGroups", "ec2:DescribeSubnets", "ec2:DescribeVpcAttribute", "ec2:DescribeVpcs", "ec2:GetCoipPoolUsage", "sns:ListSubscriptions", "sns:ListTopics", "sns:Publish", "logs:DescribeLogStreams", "logs:GetLogEvents", "outposts:GetOutpostInstanceTypes", "devops-guru:GetResourceCollection" ], "Resource" : "*" }, { "Effect" : "Allow", "Action" : "pi:*", "Resource" : [ "arn:aws:pi:*:*:metrics/rds/*", "arn:aws:pi:*:*:perf-reports/rds/*" ] }, { "Effect" : "Allow", "Action" : "iam:CreateServiceLinkedRole", "Resource" : "*", "Condition" : { "StringLike" : { "iam:AWSServiceName" : [ "rds.amazonaws.com", "rds.application-autoscaling.amazonaws.com" ] } } }, { "Action" : [ "devops-guru:SearchInsights", "devops-guru:ListAnomaliesForInsight" ], "Effect" : "Allow", "Resource" : "*", "Condition" : { "ForAllValues:StringEquals" : { "devops-guru:ServiceNames" : [ "RDS" ] }, "Null" : { "devops-guru:ServiceNames" : "false" } } } ] }