rds.yml

Actions:
  - Name: rds:AddRoleToDBCluster
  - Name: rds:AddRoleToDBInstance
  - Name: rds:AddSourceIdentifierToSubscription
  - Name: rds:AddTagsToResource
  - Name: rds:ApplyPendingMaintenanceAction
  - Name: rds:AuthorizeDBSecurityGroupIngress
  - Name: rds:BacktrackDBCluster
  - Name: rds:CancelExportTask
  - Name: rds:CopyDBClusterParameterGroup
  - Name: rds:CopyDBClusterSnapshot
  - Name: rds:CopyDBParameterGroup
  - Name: rds:CopyDBSnapshot
  - Name: rds:CopyOptionGroup
  - Name: rds:CreateDBCluster
  - Name: rds:CreateDBClusterEndpoint
  - Name: rds:CreateDBClusterParameterGroup
  - Name: rds:CreateDBClusterSnapshot
  - Name: rds:CreateDBInstance
  - Name: rds:CreateDBInstanceReadReplica
  - Name: rds:CreateDBParameterGroup
  - Name: rds:CreateDBProxy
  - Name: rds:CreateDBSecurityGroup
  - Name: rds:CreateDBSnapshot
  - Name: rds:CreateDBSubnetGroup
  - Name: rds:CreateEventSubscription
  - Name: rds:CreateGlobalCluster
  - Name: rds:CreateOptionGroup
  - Name: rds:DeleteDBCluster
  - Name: rds:DeleteDBClusterEndpoint
  - Name: rds:DeleteDBClusterParameterGroup
  - Name: rds:DeleteDBClusterSnapshot
  - Name: rds:DeleteDBInstance
  - Name: rds:DeleteDBInstanceAutomatedBackup
  - Name: rds:DeleteDBParameterGroup
  - Name: rds:DeleteDBProxy
  - Name: rds:DeleteDBSecurityGroup
  - Name: rds:DeleteDBSnapshot
  - Name: rds:DeleteDBSubnetGroup
  - Name: rds:DeleteEventSubscription
  - Name: rds:DeleteGlobalCluster
  - Name: rds:DeleteOptionGroup
  - Name: rds:DeregisterDBProxyTargets
  - Name: rds:DescribeAccountAttributes
  - Name: rds:DescribeCertificates
  - Name: rds:DescribeDBClusterBacktracks
  - Name: rds:DescribeDBClusterEndpoints
  - Name: rds:DescribeDBClusterParameterGroups
  - Name: rds:DescribeDBClusterParameters
  - Name: rds:DescribeDBClusterSnapshotAttributes
  - Name: rds:DescribeDBClusterSnapshots
  - Name: rds:DescribeDBClusters
  - Name: rds:DescribeDBEngineVersions
  - Name: rds:DescribeDBInstanceAutomatedBackups
  - Name: rds:DescribeDBInstances
  - Name: rds:DescribeDBLogFiles
  - Name: rds:DescribeDBParameterGroups
  - Name: rds:DescribeDBParameters
  - Name: rds:DescribeDBProxies
  - Name: rds:DescribeDBProxyTargetGroups
  - Name: rds:DescribeDBProxyTargets
  - Name: rds:DescribeDBSecurityGroups
  - Name: rds:DescribeDBSnapshotAttributes
  - Name: rds:DescribeDBSnapshots
  - Name: rds:DescribeDBSubnetGroups
  - Name: rds:DescribeEngineDefaultClusterParameters
  - Name: rds:DescribeEngineDefaultParameters
  - Name: rds:DescribeEventCategories
  - Name: rds:DescribeEventSubscriptions
  - Name: rds:DescribeEvents
  - Name: rds:DescribeExportTasks
  - Name: rds:DescribeGlobalClusters
  - Name: rds:DescribeOptionGroupOptions
  - Name: rds:DescribeOptionGroups
  - Name: rds:DescribeOrderableDBInstanceOptions
  - Name: rds:DescribePendingMaintenanceActions
  - Name: rds:DescribeReservedDBInstances
  - Name: rds:DescribeReservedDBInstancesOfferings
  - Name: rds:DescribeSourceRegions
  - Name: rds:DescribeValidDBInstanceModifications
  - Name: rds:DownloadDBLogFilePortion
  - Name: rds:FailoverDBCluster
  - Name: rds:ListTagsForResource
  - Name: rds:ModifyCurrentDBClusterCapacity
  - Name: rds:ModifyDBCluster
  - Name: rds:ModifyDBClusterEndpoint
  - Name: rds:ModifyDBClusterParameterGroup
  - Name: rds:ModifyDBClusterSnapshotAttribute
  - Name: rds:ModifyDBInstance
  - Name: rds:ModifyDBParameterGroup
  - Name: rds:ModifyDBProxy
  - Name: rds:ModifyDBProxyTargetGroup
  - Name: rds:ModifyDBSnapshot
  - Name: rds:ModifyDBSnapshotAttribute
  - Name: rds:ModifyDBSubnetGroup
  - Name: rds:ModifyEventSubscription
  - Name: rds:ModifyGlobalCluster
  - Name: rds:ModifyOptionGroup
  - Name: rds:PromoteReadReplica
  - Name: rds:PromoteReadReplicaDBCluster
  - Name: rds:PurchaseReservedDBInstancesOffering
  - Name: rds:RebootDBInstance
  - Name: rds:RegisterDBProxyTargets
  - Name: rds:RemoveFromGlobalCluster
  - Name: rds:RemoveRoleFromDBCluster
  - Name: rds:RemoveRoleFromDBInstance
  - Name: rds:RemoveSourceIdentifierFromSubscription
  - Name: rds:RemoveTagsFromResource
  - Name: rds:ResetDBClusterParameterGroup
  - Name: rds:ResetDBParameterGroup
  - Name: rds:RestoreDBClusterFromS3
  - Name: rds:RestoreDBClusterFromSnapshot
  - Name: rds:RestoreDBClusterToPointInTime
  - Name: rds:RestoreDBInstanceFromDBSnapshot
  - Name: rds:RestoreDBInstanceFromS3
  - Name: rds:RestoreDBInstanceToPointInTime
  - Name: rds:RevokeDBSecurityGroupIngress
  - Name: rds:StartActivityStream
  - Name: rds:StartDBCluster
  - Name: rds:StartDBInstance
  - Name: rds:StartExportTask
  - Name: rds:StopActivityStream
  - Name: rds:StopDBCluster
  - Name: rds:StopDBInstance

  # actions with no corresponding API
  - Name: rds:CrossRegionCommunication

  # APIs without an IAM action
  - Name: rds:CreateCustomAvailabilityZone
  - Name: rds:DeleteCustomAvailabilityZone
  - Name: rds:DeleteInstallationMedia
  - Name: rds:DescribeCustomAvailabilityZones
  - Name: rds:DescribeInstallationMedia
  - Name: rds:ImportInstallationMedia
  - Name: rds:ModifyCertificates