Page History
AWS IAM Policy can be used to create permissions that specify which RDS actions a user, or a group of users in your AWS account can perform. IAM Policy is basically a JSON document that consists of one or more statements which defines the action to be taken on AWS resources. It can be used to determine who is allowed to create, delete, or modify RDS instances.
SQL DM for MySQL needs the following permissions to fetch the log files:
...
You can use the default policy CloudWatchReadOnlyAccess provided by AWS for OS monitoring, in case you don't do not want to create a custom policy. Keep in mind that this policy grants more permissions than SQL DM for MySQL requires to fetch your RDS/Aurora metrics.
...