2023-11-11
8 new actions, 4 new resources, 2 new conditions | 13 updated actions
Additions
Actions
-
CreateIntegration
-
Description:
Grants permission to create an Aurora zero-ETL integration with Redshift
-
Access:
Write
-
Resources:
Name: cluster
Required: Yes
Name: integration
Required: Yes
-
Conditions:
aws:RequestTag/${TagKey}
aws:TagKeys
rds:req-tag/${TagKey}
-
Dependents:
kms:CreateGrant
kms:DescribeKey
rds:AddTagsToResource
-
CreateTenantDatabase
-
Description:
Grants permission to create a new tenant database
-
Access:
Write
-
Resources:
Name: db
Required: Yes
Name: tenant-database
Required: Yes
-
Conditions:
aws:RequestTag/${TagKey}
aws:TagKeys
rds:TenantDatabaseName
-
Dependents:
rds:AddTagsToResource
-
DeleteIntegration
-
Description:
Grants permission to delete an Aurora zero-ETL integration with Redshift
-
Access:
Write
-
Resources:
Name: integration
Required: Yes
-
Conditions:
aws:ResourceTag/${TagKey}
-
DeleteTenantDatabase
-
Description:
Grants permission to delete a tenant database
-
Access:
Write
-
Resources:
Name: db
Required: Yes
Name: tenant-database
Required: Yes
-
DescribeDbSnapshotTenantDatabases
-
Description:
Grants permission to return information about tenant databases in DB snapshots. You can filter by Region or snapshot
-
Access:
List
-
Resources:
Name: snapshot-tenant-database
Required: Yes
Name: db
Required: No
Name: snapshot
Required: No
-
DescribeIntegrations
-
Description:
Grants permission to describe an Aurora zero-ETL integration with Redshift
-
Access:
List
-
Resources:
Name: integration
Required: Yes
-
Conditions:
aws:ResourceTag/${TagKey}
-
DescribeTenantDatabases
-
Description:
Grants permission to return information about provisioned tenant databases. You can filter by Region or snapshot
-
Access:
List
-
Resources:
Name: tenant-database
Required: Yes
Name: db
Required: No
-
ModifyTenantDatabase
-
Description:
Grants permission to modify a tenant database
-
Access:
Write
-
Resources:
Name: db
Required: Yes
Name: tenant-database
Required: Yes
-
Conditions:
rds:TenantDatabaseName
Resources
-
auto-backup
-
Arn:
arn:${Partition}:rds:${Region}:${Account}:auto-backup:${DbInstanceAutomatedBackupId}
-
integration
-
Arn:
arn:${Partition}:rds:${Region}:${Account}:integration:${IntegrationIdentifier}
-
Conditions:
aws:ResourceTag/${TagKey}
-
snapshot-tenant-database
-
Arn:
arn:${Partition}:rds:${Region}:${Account}:snapshot-tenant-database:${SnapshotName}:${TenantResourceId}
-
Conditions:
aws:ResourceTag/${TagKey}
-
tenant-database
-
Arn:
arn:${Partition}:rds:${Region}:${Account}:tenant-database:${TenantResourceId}
-
Conditions:
aws:ResourceTag/${TagKey}
Conditions
-
rds:MultiTenant
-
Description:
Filters access by the value that specifies whether the DB instance is in the multi-tenant configuration
-
Type:
String
-
rds:TenantDatabaseName
-
Description:
Filters access by the tenant database name in CreateTenantDatabase and by the new tenant database name in ModifyTenantDatabase
-
Type:
String