| pi:TagResource | Operator |
| pi:UntagResource | Operator |
| rds:AddSourceIdentifierToSubscription | Operator |
| rds:AddTagsToResource | Operator |
| rds:ApplyPendingMaintenanceAction | Operator |
| rds:CopyDBClusterSnapshot | Operator |
| rds:CopyDBSnapshot | Operator |
| rds:CreateDBClusterSnapshot | Operator |
| rds:CreateDBSnapshot | Operator |
| rds:CreateEventSubscription | Operator |
| rds:DeleteEventSubscription | Operator |
| rds:FailoverDBCluster | Operator |
| rds:FailoverGlobalCluster | Operator |
| rds:ModifyDBSnapshot | Operator |
| rds:ModifyEventSubscription | Operator |
| rds:PromoteReadReplica | Operator |
| rds:PromoteReadReplicaDBCluster | Operator |
| rds:RebootDBCluster | Operator |
| rds:RebootDBInstance | Operator |
| rds:RemoveSourceIdentifierFromSubscription | Operator |
| rds:RemoveTagsFromResource | Operator |
| rds:StartActivityStream | Operator |
| rds:StartDBCluster | Operator |
| rds:StartDBInstance | Operator |
| rds:StartDBInstanceAutomatedBackupsReplication | Operator |
| rds:StartExportTask | Operator |
| rds:StopActivityStream | Operator |
| rds:StopDBCluster | Operator |
| rds:StopDBInstance | Operator |
| rds:StopDBInstanceAutomatedBackupsReplication | Operator |
| rds:DownloadCompleteDBLogFile | ReadOnly |
| rds:DownloadDBLogFilePortion | ReadOnly |
| cloudwatch:DescribeAlarms | Metadata |
| cloudwatch:GetMetricData | Metadata |
| cloudwatch:GetMetricStatistics | Metadata |
| dbqms:DescribeFavoriteQueries | Metadata |
| dbqms:DescribeQueryHistory | Metadata |
| dbqms:DescribeTabs | Metadata |
| dbqms:GetQueryString | Metadata |
| ec2:DescribeAccountAttributes | Metadata |
| ec2:DescribeAvailabilityZones | Metadata |
| ec2:DescribeSecurityGroups | Metadata |
| ec2:DescribeSubnets | Metadata |
| ec2:DescribeVpcs | Metadata |
| iam:ListRoles | Metadata |
| kms:ListAliases | Metadata |
| pi:DescribeDimensionKeys | Metadata |
| pi:GetDimensionKeyDetails | Metadata |
| pi:GetPerformanceAnalysisReport | Metadata |
| pi:GetResourceMetadata | Metadata |
| pi:GetResourceMetrics | Metadata |
| pi:ListAvailableResourceDimensions | Metadata |
| pi:ListAvailableResourceMetrics | Metadata |
| pi:ListPerformanceAnalysisReports | Metadata |
| pi:ListTagsForResource | Metadata |
| ram:GetResourceShares | Metadata |
| ram:ListResources | Metadata |
| rds:DescribeAccountAttributes | Metadata |
| rds:DescribeCertificates | Metadata |
| rds:DescribeCustomAvailabilityZones | Metadata |
| rds:DescribeDBClusterBacktracks | Metadata |
| rds:DescribeDBClusterEndpoints | Metadata |
| rds:DescribeDBClusterParameterGroups | Metadata |
| rds:DescribeDBClusterParameters | Metadata |
| rds:DescribeDBClusters | Metadata |
| rds:DescribeDBClusterSnapshotAttributes | Metadata |
| rds:DescribeDBClusterSnapshots | Metadata |
| rds:DescribeDBEngineVersions | Metadata |
| rds:DescribeDBInstanceAutomatedBackups | Metadata |
| rds:DescribeDBInstances | Metadata |
| rds:DescribeDBLogFiles | Metadata |
| rds:DescribeDBParameterGroups | Metadata |
| rds:DescribeDBParameters | Metadata |
| rds:DescribeDBProxies | Metadata |
| rds:DescribeDBProxyEndpoints | Metadata |
| rds:DescribeDBProxyTargetGroups | Metadata |
| rds:DescribeDBProxyTargets | Metadata |
| rds:DescribeDBSecurityGroups | Metadata |
| rds:DescribeDBSnapshotAttributes | Metadata |
| rds:DescribeDBSnapshots | Metadata |
| rds:DescribeDBSubnetGroups | Metadata |
| rds:DescribeEngineDefaultClusterParameters | Metadata |
| rds:DescribeEngineDefaultParameters | Metadata |
| rds:DescribeEventCategories | Metadata |
| rds:DescribeEvents | Metadata |
| rds:DescribeEventSubscriptions | Metadata |
| rds:DescribeExportTasks | Metadata |
| rds:DescribeGlobalClusters | Metadata |
| rds:DescribeInstallationMedia | Metadata |
| rds:DescribeOptionGroupOptions | Metadata |
| rds:DescribeOptionGroups | Metadata |
| rds:DescribeOrderableDBInstanceOptions | Metadata |
| rds:DescribePendingMaintenanceActions | Metadata |
| rds:DescribeRecommendationGroups | Metadata |
| rds:DescribeRecommendations | Metadata |
| rds:DescribeReservedDBInstances | Metadata |
| rds:DescribeReservedDBInstancesOfferings | Metadata |
| rds:DescribeSourceRegions | Metadata |
| rds:DescribeValidDBInstanceModifications | Metadata |
| rds:ListTagsForResource | Metadata |
