| rds:PurchaseReservedDBInstancesOffering | Owner |
| dbqms:CreateFavoriteQuery | Admin |
| dbqms:CreateQueryHistory | Admin |
| dbqms:CreateTab | Admin |
| dbqms:DeleteFavoriteQueries | Admin |
| dbqms:DeleteQueryHistory | Admin |
| dbqms:DeleteTab | Admin |
| dbqms:UpdateFavoriteQuery | Admin |
| dbqms:UpdateQueryHistory | Admin |
| dbqms:UpdateTab | Admin |
| iam:PassRole | Admin |
| pi:CreatePerformanceAnalysisReport | Admin |
| pi:DeletePerformanceAnalysisReport | Admin |
| rds-data:BatchExecuteStatement | Admin |
| rds-data:BeginTransaction | Admin |
| rds-data:CommitTransaction | Admin |
| rds-data:ExecuteSql | Admin |
| rds-data:ExecuteStatement | Admin |
| rds-data:RollbackTransaction | Admin |
| rds-db:connect | Admin |
| rds:AddRoleToDBCluster | Admin |
| rds:AddRoleToDBInstance | Admin |
| rds:AuthorizeDBSecurityGroupIngress | Admin |
| rds:BacktrackDBCluster | Admin |
| rds:CancelExportTask | Admin |
| rds:CopyDBClusterParameterGroup | Admin |
| rds:CopyDBParameterGroup | Admin |
| rds:CopyOptionGroup | Admin |
| rds:CreateCustomAvailabilityZone | Admin |
| rds:CreateCustomDBEngineVersion | Admin |
| rds:CreateDBCluster | Admin |
| rds:CreateDBClusterEndpoint | Admin |
| rds:CreateDBClusterParameterGroup | Admin |
| rds:CreateDBInstance | Admin |
| rds:CreateDBInstanceReadReplica | Admin |
| rds:CreateDBParameterGroup | Admin |
| rds:CreateDBProxy | Admin |
| rds:CreateDBProxyEndpoint | Admin |
| rds:CreateDBSecurityGroup | Admin |
| rds:CreateGlobalCluster | Admin |
| rds:CreateOptionGroup | Admin |
| rds:CrossRegionCommunication | Admin |
| rds:DeleteCustomAvailabilityZone | Admin |
| rds:DeleteCustomDBEngineVersion | Admin |
| rds:DeleteDBCluster | Admin |
| rds:DeleteDBClusterEndpoint | Admin |
| rds:DeleteDBClusterParameterGroup | Admin |
| rds:DeleteDBClusterSnapshot | Admin |
| rds:DeleteDBInstance | Admin |
| rds:DeleteDBInstanceAutomatedBackup | Admin |
| rds:DeleteDBParameterGroup | Admin |
| rds:DeleteDBProxy | Admin |
| rds:DeleteDBProxyEndpoint | Admin |
| rds:DeleteDBSecurityGroup | Admin |
| rds:DeleteDBSnapshot | Admin |
| rds:DeleteGlobalCluster | Admin |
| rds:DeleteInstallationMedia | Admin |
| rds:DeleteOptionGroup | Admin |
| rds:DeregisterDBProxyTargets | Admin |
| rds:ImportInstallationMedia | Admin |
| rds:ModifyCertificates | Admin |
| rds:ModifyCurrentDBClusterCapacity | Admin |
| rds:ModifyCustomDBEngineVersion | Admin |
| rds:ModifyDBCluster | Admin |
| rds:ModifyDBClusterEndpoint | Admin |
| rds:ModifyDBClusterParameterGroup | Admin |
| rds:ModifyDBClusterSnapshotAttribute | Admin |
| rds:ModifyDBInstance | Admin |
| rds:ModifyDBParameterGroup | Admin |
| rds:ModifyDBProxy | Admin |
| rds:ModifyDBProxyEndpoint | Admin |
| rds:ModifyDBProxyTargetGroup | Admin |
| rds:ModifyDBSnapshotAttribute | Admin |
| rds:ModifyGlobalCluster | Admin |
| rds:ModifyOptionGroup | Admin |
| rds:ModifyRecommendation | Admin |
| rds:RegisterDBProxyTargets | Admin |
| rds:RemoveFromGlobalCluster | Admin |
| rds:RemoveRoleFromDBCluster | Admin |
| rds:RemoveRoleFromDBInstance | Admin |
| rds:ResetDBClusterParameterGroup | Admin |
| rds:ResetDBParameterGroup | Admin |
| rds:RestoreDBClusterFromS3 | Admin |
| rds:RestoreDBClusterFromSnapshot | Admin |
| rds:RestoreDBClusterToPointInTime | Admin |
| rds:RestoreDBInstanceFromDBSnapshot | Admin |
| rds:RestoreDBInstanceFromS3 | Admin |
| rds:RestoreDBInstanceToPointInTime | Admin |
| rds:RevokeDBSecurityGroupIngress | Admin |
| pi:TagResource | Operator |
| pi:UntagResource | Operator |
| rds:AddSourceIdentifierToSubscription | Operator |
| rds:AddTagsToResource | Operator |
| rds:ApplyPendingMaintenanceAction | Operator |
| rds:CopyDBClusterSnapshot | Operator |
| rds:CopyDBSnapshot | Operator |
| rds:CreateDBClusterSnapshot | Operator |
| rds:CreateDBSnapshot | Operator |
| rds:CreateEventSubscription | Operator |
| rds:DeleteEventSubscription | Operator |
| rds:FailoverDBCluster | Operator |
| rds:FailoverGlobalCluster | Operator |
| rds:ModifyDBSnapshot | Operator |
| rds:ModifyEventSubscription | Operator |
| rds:PromoteReadReplica | Operator |
| rds:PromoteReadReplicaDBCluster | Operator |
| rds:RebootDBCluster | Operator |
| rds:RebootDBInstance | Operator |
| rds:RemoveSourceIdentifierFromSubscription | Operator |
| rds:RemoveTagsFromResource | Operator |
| rds:StartActivityStream | Operator |
| rds:StartDBCluster | Operator |
| rds:StartDBInstance | Operator |
| rds:StartDBInstanceAutomatedBackupsReplication | Operator |
| rds:StartExportTask | Operator |
| rds:StopActivityStream | Operator |
| rds:StopDBCluster | Operator |
| rds:StopDBInstance | Operator |
| rds:StopDBInstanceAutomatedBackupsReplication | Operator |
| rds:DownloadCompleteDBLogFile | ReadOnly |
| rds:DownloadDBLogFilePortion | ReadOnly |
| cloudwatch:DescribeAlarms | Metadata |
| cloudwatch:GetMetricData | Metadata |
| cloudwatch:GetMetricStatistics | Metadata |
| dbqms:DescribeFavoriteQueries | Metadata |
| dbqms:DescribeQueryHistory | Metadata |
| dbqms:DescribeTabs | Metadata |
| dbqms:GetQueryString | Metadata |
| ec2:DescribeAccountAttributes | Metadata |
| ec2:DescribeAvailabilityZones | Metadata |
| ec2:DescribeSecurityGroups | Metadata |
| ec2:DescribeSubnets | Metadata |
| ec2:DescribeVpcs | Metadata |
| iam:ListRoles | Metadata |
| kms:ListAliases | Metadata |
| pi:DescribeDimensionKeys | Metadata |
| pi:GetDimensionKeyDetails | Metadata |
| pi:GetPerformanceAnalysisReport | Metadata |
| pi:GetResourceMetadata | Metadata |
| pi:GetResourceMetrics | Metadata |
| pi:ListAvailableResourceDimensions | Metadata |
| pi:ListAvailableResourceMetrics | Metadata |
| pi:ListPerformanceAnalysisReports | Metadata |
| pi:ListTagsForResource | Metadata |
| ram:GetResourceShares | Metadata |
| ram:ListResources | Metadata |
| rds:DescribeAccountAttributes | Metadata |
| rds:DescribeCertificates | Metadata |
| rds:DescribeCustomAvailabilityZones | Metadata |
| rds:DescribeDBClusterBacktracks | Metadata |
| rds:DescribeDBClusterEndpoints | Metadata |
| rds:DescribeDBClusterParameterGroups | Metadata |
| rds:DescribeDBClusterParameters | Metadata |
| rds:DescribeDBClusters | Metadata |
| rds:DescribeDBClusterSnapshotAttributes | Metadata |
| rds:DescribeDBClusterSnapshots | Metadata |
| rds:DescribeDBEngineVersions | Metadata |
| rds:DescribeDBInstanceAutomatedBackups | Metadata |
| rds:DescribeDBInstances | Metadata |
| rds:DescribeDBLogFiles | Metadata |
| rds:DescribeDBParameterGroups | Metadata |
| rds:DescribeDBParameters | Metadata |
| rds:DescribeDBProxies | Metadata |
| rds:DescribeDBProxyEndpoints | Metadata |
| rds:DescribeDBProxyTargetGroups | Metadata |
| rds:DescribeDBProxyTargets | Metadata |
| rds:DescribeDBSecurityGroups | Metadata |
| rds:DescribeDBSnapshotAttributes | Metadata |
| rds:DescribeDBSnapshots | Metadata |
| rds:DescribeDBSubnetGroups | Metadata |
| rds:DescribeEngineDefaultClusterParameters | Metadata |
| rds:DescribeEngineDefaultParameters | Metadata |
| rds:DescribeEventCategories | Metadata |
| rds:DescribeEvents | Metadata |
| rds:DescribeEventSubscriptions | Metadata |
| rds:DescribeExportTasks | Metadata |
| rds:DescribeGlobalClusters | Metadata |
| rds:DescribeInstallationMedia | Metadata |
| rds:DescribeOptionGroupOptions | Metadata |
| rds:DescribeOptionGroups | Metadata |
| rds:DescribeOrderableDBInstanceOptions | Metadata |
| rds:DescribePendingMaintenanceActions | Metadata |
| rds:DescribeRecommendationGroups | Metadata |
| rds:DescribeRecommendations | Metadata |
| rds:DescribeReservedDBInstances | Metadata |
| rds:DescribeReservedDBInstancesOfferings | Metadata |
| rds:DescribeSourceRegions | Metadata |
| rds:DescribeValidDBInstanceModifications | Metadata |
| rds:ListTagsForResource | Metadata |
