'Creating AWS Read Replica using IAM user with least privileges
I am trying to create an AWS IAM user with least privileges for creating Read Replica of a MySQL RDS database. I am using an inline policy with the following content:
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "VisualEditor0",
"Effect": "Allow",
"Action": [
"rds:CreateDBParameterGroup",
"rds:ModifyOptionGroup",
"rds:List*",
"rds:CreateDBSubnetGroup",
"ec2:Describe*",
"rds:ModifyDBParameterGroup",
"rds:Describe*",
"rds:CreateDBSnapshot",
"rds:RestoreDBInstanceFromDBSnapshot",
"rds:RebootDBInstance",
"rds:CreateDBInstance",
"rds:DownloadDBLogFilePortion",
"rds:ModifyDBInstance",
"rds:CreateDBInstanceReadReplica",
"rds:RestoreDBInstanceToPointInTime",
"rds:DeleteDBInstance"
],
"Resource": "*"
}
]
}
But still I am not able to get it working. Can anyone suggest what should add in this policy for the IAM user to be able to create a Read Replica.
Note: Please do not suggest adding AdministratorAccess policy because I want the IAM user to be configured with minimum privileges for this task.
Sources
This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.
Source: Stack Overflow
| Solution | Source |
|---|
