'Creating AWS Read Replica using IAM user with least privileges

I am trying to create an AWS IAM user with least privileges for creating Read Replica of a MySQL RDS database. I am using an inline policy with the following content:

    {
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": [
                "rds:CreateDBParameterGroup",
                "rds:ModifyOptionGroup",
                "rds:List*",
                "rds:CreateDBSubnetGroup",
                "ec2:Describe*",
                "rds:ModifyDBParameterGroup",
                "rds:Describe*",
                "rds:CreateDBSnapshot",
                "rds:RestoreDBInstanceFromDBSnapshot",
                "rds:RebootDBInstance",
                "rds:CreateDBInstance",
                "rds:DownloadDBLogFilePortion",
                "rds:ModifyDBInstance",
                "rds:CreateDBInstanceReadReplica",
                "rds:RestoreDBInstanceToPointInTime",
                "rds:DeleteDBInstance"
            ],
            "Resource": "*"
        }
    ]
}

But still I am not able to get it working. Can anyone suggest what should add in this policy for the IAM user to be able to create a Read Replica.

Note: Please do not suggest adding AdministratorAccess policy because I want the IAM user to be configured with minimum privileges for this task.



Sources

This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.

Source: Stack Overflow

Solution Source