Action Description Resources Conditions
Adds a source identifier to an existing RDS event notification subscription.
  • arn:aws:rds:$region:$account:es:$subscription-name
Adds metadata tags to an Amazon RDS resource.
  • arn:aws:rds:$region:$account:db:$db-instance-name
Adds metadata tags to an Amazon RDS resource.
  • arn:aws:rds:$region:$account:og:$option-group-name
Adds metadata tags to an Amazon RDS resource.
  • arn:aws:rds:$region:$account:pg:$parameter-group-name
Adds metadata tags to an Amazon RDS resource.
  • arn:aws:rds:$region:$account:secgrp:$security-group-name
Adds metadata tags to an Amazon RDS resource.
  • arn:aws:rds:$region:$account:subgrp:$subnet-group-name
Adds metadata tags to an Amazon RDS resource.
  • arn:aws:rds:$region:$account:snapshot:$snapshot-name
Adds metadata tags to an Amazon RDS resource.
  • arn:aws:rds:$region:$account:es:$subscription-name
Adds metadata tags to an Amazon RDS resource.
  • arn:aws:rds:$region:$account:ri:$reserved-db-instance-name
Applies a pending maintenance action to a resource (for example, to a DB instance).
  • arn:aws:rds:$region:$account:db:$db-instance-name
Enables ingress to a DBSecurityGroup using one of two forms of authorization.
  • arn:aws:rds:$region:$account:secgrp:$security-group-name
Creates a snapshot of a DB cluster.
  • arn:aws:rds:$region:$account:cluster-snapshot:$cluster-snapshot-name
Copies the specified DB parameter group.
  • arn:aws:rds:$region:$account:pg:$parameter-group-name
Copies the specified DB snapshot.
  • arn:aws:rds:$region:$account:snapshot:$snapshot-name
Copies the specified option group.
  • arn:aws:rds:$region:$account:og:$option-group-name
Creates a new Amazon Aurora DB cluster.
  • arn:aws:rds:$region:$account:cluster:$db-cluster-name
Creates a new Amazon Aurora DB cluster.
  • arn:aws:rds:$region:$account:og:$option-group-name
Creates a new Amazon Aurora DB cluster.
  • arn:aws:rds:$region:$account:cluster-pg:$cluster-parameter-group-name
Creates a new Amazon Aurora DB cluster.
  • arn:aws:rds:$region:$account:subgrp:$subnet-group-name
Creates a new DB cluster parameter group.
  • arn:aws:rds:$region:$account:cluster-pg:$cluster-parameter-group-name
Creates a snapshot of a DB cluster.
  • arn:aws:rds:$region:$account:cluster:$db-cluster-name
Creates a snapshot of a DB cluster.
  • arn:aws:rds:$region:$account:cluster-snapshot:$cluster-snapshot-name
Creates a new DB instance.
  • arn:aws:rds:$region:$account:db:$db-instance-name
  • rds:DatabaseClass
  • rds:DatabaseEngine
  • rds:DatabaseName
  • rds:MultiAz
  • rds:Piops
  • rds:StorageSize
  • rds:Vpc
  • rds:db-tag
  • Global Conditions
Creates a new DB instance.
  • arn:aws:rds:$region:$account:og:$option-group-name
Creates a new DB instance.
  • arn:aws:rds:$region:$account:pg:$parameter-group-name
Creates a new DB instance.
  • arn:aws:rds:$region:$account:secgrp:$security-group-name
Creates a new DB instance.
  • arn:aws:rds:$region:$account:subgrp:$subnet-group-name
Creates a DB instance for a DB instance running MySQL, MariaDB, or PostgreSQL that acts as a Read Replica of a source DB instance.
  • arn:aws:rds:$region:$account:db:$db-instance-name
Creates a DB instance for a DB instance running MySQL, MariaDB, or PostgreSQL that acts as a Read Replica of a source DB instance.
  • arn:aws:rds:$region:$account:og:$option-group-name
Creates a DB instance for a DB instance running MySQL, MariaDB, or PostgreSQL that acts as a Read Replica of a source DB instance.
  • arn:aws:rds:$region:$account:subgrp:$subnet-group-name
Creates a new DB parameter group.
  • arn:aws:rds:$region:$account:pg:$parameter-group-name
Creates a new DB security group.
  • arn:aws:rds:$region:$account:secgrp:$security-group-name
Creates a DBSnapshot.
  • arn:aws:rds:$region:$account:db:$db-instance-name
Creates a DBSnapshot.
  • arn:aws:rds:$region:$account:snapshot:$snapshot-name
Creates a new DB subnet group.
  • arn:aws:rds:$region:$account:subgrp:$subnet-group-name
Creates an RDS event notification subscription.
  • arn:aws:rds:$region:$account:es:$subscription-name
Creates a new option group.
  • arn:aws:rds:$region:$account:og:$option-group-name
The DeleteDBCluster action deletes a previously provisioned DB cluster.
  • arn:aws:rds:$region:$account:cluster:$db-cluster-name
The DeleteDBCluster action deletes a previously provisioned DB cluster.
  • arn:aws:rds:$region:$account:cluster-snapshot:$cluster-snapshot-name
Deletes a specified DB cluster parameter group.
  • arn:aws:rds:$region:$account:cluster-pg:$cluster-parameter-group-name
Deletes a DB cluster snapshot.
  • arn:aws:rds:$region:$account:cluster-snapshot:$cluster-snapshot-name
The DeleteDBInstance action deletes a previously provisioned DB instance.
  • arn:aws:rds:$region:$account:db:$db-instance-name
Deletes a specified DBParameterGroup.
  • arn:aws:rds:$region:$account:pg:$parameter-group-name
Deletes a DB security group.
  • arn:aws:rds:$region:$account:secgrp:$security-group-name
Deletes a DBSnapshot.
  • arn:aws:rds:$region:$account:snapshot:$snapshot-name
Deletes a DB subnet group.
  • arn:aws:rds:$region:$account:subgrp:$subnet-group-name
Deletes an RDS event notification subscription.
  • arn:aws:rds:$region:$account:es:$subscription-name
Deletes an existing option group.
  • arn:aws:rds:$region:$account:og:$option-group-name
Lists all of the attributes for a customer account.
  • *
Lists the set of CA certificates provided by Amazon RDS for this AWS account.
  • *
Returns a list of DBClusterParameterGroup descriptions.
  • arn:aws:rds:$region:$account:cluster-pg:$cluster-parameter-group-name
Returns the detailed parameter list for a particular DB cluster parameter group.
  • arn:aws:rds:$region:$account:cluster-pg:$cluster-parameter-group-name
Returns information about provisioned Aurora DB clusters.
  • arn:aws:rds:$region:$account:cluster:$db-cluster-name
Returns a list of DB cluster snapshot attribute names and values for a manual DB cluster snapshot.
  • arn:aws:rds:$region:$account:cluster-snapshot:$cluster-snapshot-name
Returns a list of the available DB engines.
  • arn:aws:rds:$region:$account:pg:$parameter-group-name
Returns information about provisioned RDS instances.
  • *
Returns a list of DB log files for the DB instance.
  • arn:aws:rds:$region:$account:db:$db-instance-name
Returns a list of DBParameterGroup descriptions.
  • arn:aws:rds:$region:$account:pg:$parameter-group-name
Returns the detailed parameter list for a particular DB parameter group.
  • arn:aws:rds:$region:$account:pg:$parameter-group-name
Returns a list of DBSecurityGroup descriptions.
  • arn:aws:rds:$region:$account:secgrp:$security-group-name
Returns a list of DB snapshot attribute names and values for a manual DB snapshot.
  • arn:aws:rds:$region:$account:snapshot:$snapshot-name
Returns information about DB snapshots.
  • arn:aws:rds:$region:$account:db:$db-instance-name
Returns information about DB snapshots.
  • arn:aws:rds:$region:$account:snapshot:$snapshot-name
Returns a list of DBSubnetGroup descriptions.
  • arn:aws:rds:$region:$account:subgrp:$subnet-group-name
Returns the default engine and system parameter information for the cluster database engine.
  • *
Returns the default engine and system parameter information for the specified database engine.
  • *
Displays a list of categories for all event source types, or, if specified, for a specified source type.
  • *
Returns events related to DB instances, DB security groups, DB snapshots, and DB parameter groups for the past 14 days.
  • *
Lists all the subscription descriptions for a customer account.
  • arn:aws:rds:$region:$account:es:$subscription-name
Describes all available options.
  • arn:aws:rds:$region:$account:og:$option-group-name
Describes the available option groups.
  • arn:aws:rds:$region:$account:og:$option-group-name
Returns a list of orderable DB instance options for the specified engine.
  • *
Returns a list of resources (for example, DB instances) that have at least one pending maintenance action.
  • arn:aws:rds:$region:$account:db:$db-instance-name
  • rds:DatabaseClass
  • rds:DatabaseEngine
  • rds:DatabaseName
  • rds:MultiAz
  • rds:Piops
  • rds:StorageSize
  • rds:Vpc
  • rds:db-tag
  • Global Conditions
Returns information about reserved DB instances for this account, or about a specified reserved DB instance.
  • arn:aws:rds:$region:$account:ri:$reserved-db-instance-name
Lists available reserved DB instance offerings.
  • arn:aws:rds:$region:$account:db:$db-instance-name
Downloads the contents of the specified database log file.
  • *
Downloads all or a portion of the specified log file, up to 1 MB in size.
  • arn:aws:rds:$region:$account:db:$db-instance-name
Forces a failover for a DB cluster.
  • arn:aws:rds:$region:$account:cluster:$db-cluster-name
Lists all tags on an Amazon RDS resource.
  • arn:aws:rds:$region:$account:db:$db-instance-name
Lists all tags on an Amazon RDS resource.
  • arn:aws:rds:$region:$account:og:$option-group-name
Lists all tags on an Amazon RDS resource.
  • arn:aws:rds:$region:$account:pg:$parameter-group-name
Lists all tags on an Amazon RDS resource.
  • arn:aws:rds:$region:$account:secgrp:$security-group-name
Lists all tags on an Amazon RDS resource.
  • arn:aws:rds:$region:$account:subgrp:$subnet-group-name
Lists all tags on an Amazon RDS resource.
  • arn:aws:rds:$region:$account:snapshot:$snapshot-name
Lists all tags on an Amazon RDS resource.
  • arn:aws:rds:$region:$account:es:$subscription-name
Lists all tags on an Amazon RDS resource.
  • arn:aws:rds:$region:$account:ri:$reserved-db-instance-name
Modify a setting for an Amazon Aurora DB cluster.
  • arn:aws:rds:$region:$account:cluster:$db-cluster-name
Modify a setting for an Amazon Aurora DB cluster.
  • arn:aws:rds:$region:$account:og:$option-group-name
Modify a setting for an Amazon Aurora DB cluster.
  • arn:aws:rds:$region:$account:cluster-pg:$cluster-parameter-group-name
Adds an attribute and values to, or removes an attribute and values from, a manual DB cluster snapshot.
  • arn:aws:rds:$region:$account:cluster-snapshot:$cluster-snapshot-name
Modify settings for a DB instance.
  • arn:aws:rds:$region:$account:db:$db-instance-name
  • rds:DatabaseClass
  • rds:MultiAz
  • rds:Piops
  • rds:StorageSize
  • rds:Vpc
  • rds:db-tag
  • Global Conditions
Modify settings for a DB instance.
  • arn:aws:rds:$region:$account:og:$option-group-name
Modify settings for a DB instance.
  • arn:aws:rds:$region:$account:pg:$parameter-group-name
Modify settings for a DB instance.
  • arn:aws:rds:$region:$account:secgrp:$security-group-name
Modifies the parameters of a DB parameter group.
  • arn:aws:rds:$region:$account:pg:$parameter-group-name
Adds an attribute and values to, or removes an attribute and values from, a manual DB snapshot.
  • arn:aws:rds:$region:$account:snapshot:$snapshot-name
Modifies an existing DB subnet group.
  • arn:aws:rds:$region:$account:subgrp:$subnet-group-name
Modifies an existing RDS event notification subscription.
  • arn:aws:rds:$region:$account:es:$subscription-name
Modifies an existing option group.
  • arn:aws:rds:$region:$account:og:$option-group-name
Promotes a Read Replica DB instance to a standalone DB instance.
  • arn:aws:rds:$region:$account:db:$db-instance-name
Promotes a Read Replica DB cluster to a standalone DB cluster.
  • arn:aws:rds:$region:$account:cluster:$db-cluster-name
Purchases a reserved DB instance offering.
  • *
Rebooting a DB instance restarts the database engine service.
  • arn:aws:rds:$region:$account:db:$db-instance-name
Removes a source identifier from an existing RDS event notification subscription.
  • arn:aws:rds:$region:$account:es:$subscription-name
Removes metadata tags from an Amazon RDS resource.
  • arn:aws:rds:$region:$account:db:$db-instance-name
Removes metadata tags from an Amazon RDS resource.
  • arn:aws:rds:$region:$account:og:$option-group-name
Removes metadata tags from an Amazon RDS resource.
  • arn:aws:rds:$region:$account:pg:$parameter-group-name
Removes metadata tags from an Amazon RDS resource.
  • arn:aws:rds:$region:$account:secgrp:$security-group-name
Removes metadata tags from an Amazon RDS resource.
  • arn:aws:rds:$region:$account:subgrp:$subnet-group-name
Removes metadata tags from an Amazon RDS resource.
  • arn:aws:rds:$region:$account:snapshot:$snapshot-name
Removes metadata tags from an Amazon RDS resource.
  • arn:aws:rds:$region:$account:es:$subscription-name
Removes metadata tags from an Amazon RDS resource.
  • arn:aws:rds:$region:$account:ri:$reserved-db-instance-name
Modifies the parameters of a DB cluster parameter group to the default value.
  • arn:aws:rds:$region:$account:cluster-pg:$cluster-parameter-group-name
Modifies the parameters of a DB parameter group to the engine/system default value.
  • arn:aws:rds:$region:$account:pg:$parameter-group-name
Creates an Amazon Aurora DB cluster from data stored in an Amazon S3 bucket.
  • arn:aws:rds:$region:$account:cluster:$db-cluster-instance-name
Creates an Amazon Aurora DB cluster from data stored in an Amazon S3 bucket.
  • arn:aws:rds:$region:$account:cluster-pg:$cluster-parameter-group-name
Creates an Amazon Aurora DB cluster from data stored in an Amazon S3 bucket.
  • arn:aws:rds:$region:$account:og:$option-group-name
Creates an Amazon Aurora DB cluster from data stored in an Amazon S3 bucket.
  • arn:aws:rds:$region:$account:subgrp:$subnet-group-name
Creates a new DB cluster from a DB cluster snapshot.
  • arn:aws:rds:$region:$account:cluster:$db-cluster-instance-name
Creates a new DB cluster from a DB cluster snapshot.
  • arn:aws:rds:$region:$account:og:$option-group-name
Creates a new DB cluster from a DB cluster snapshot.
  • arn:aws:rds:$region:$account:cluster-snapshot:$cluster-snapshot-name
Restores a DB cluster to an arbitrary point in time.
  • arn:aws:rds:$region:$account:cluster:$db-cluster-instance-name
Restores a DB cluster to an arbitrary point in time.
  • arn:aws:rds:$region:$account:og:$option-group-name
Restores a DB cluster to an arbitrary point in time.
  • arn:aws:rds:$region:$account:subgrp:$subnet-group-name
Creates a new DB instance from a DB snapshot.
  • arn:aws:rds:$region:$account:db:$db-instance-name
  • rds:DatabaseClass
  • rds:DatabaseEngine
  • rds:DatabaseName
  • rds:MultiAz
  • rds:Piops
  • rds:Vpc
  • rds:db-tag
  • Global Conditions
Creates a new DB instance from a DB snapshot.
  • arn:aws:rds:$region:$account:og:$option-group-name
Creates a new DB instance from a DB snapshot.
  • arn:aws:rds:$region:$account:snapshot:$snapshot-name
Creates a new DB instance from a DB snapshot.
  • arn:aws:rds:$region:$account:subgrp:$subnet-group-name
Restores a DB instance to an arbitrary point in time.
  • arn:aws:rds:$region:$account:db:$db-instance-name
  • rds:DatabaseClass
  • rds:DatabaseEngine
  • rds:DatabaseName
  • rds:MultiAz
  • rds:Piops
  • rds:Vpc
  • rds:db-tag
  • Global Conditions
Restores a DB instance to an arbitrary point in time.
  • arn:aws:rds:$region:$account:og:$option-group-name
Restores a DB instance to an arbitrary point in time.
  • arn:aws:rds:$region:$account:snapshot:$snapshot-name
Restores a DB instance to an arbitrary point in time.
  • arn:aws:rds:$region:$account:subgrp:$subnet-group-name
Revokes ingress from a DBSecurityGroup for previously authorized IP ranges or EC2 or VPC Security Groups.
  • arn:aws:rds:$region:$account:secgrp:$security-group-name
Returns information about DB cluster snapshots.
  • *
Starts a DB instance that was stopped.
  • *
Stops a DB instance.
  • *