Page History
AWS IAM Policy can be used to create permissions that specify which RDS actions a user, or a group of users in your AWS account can perform. IAM Policy is basically a JSON document that consists of one or more statements which defines the action to be taken on AWS resources. It can be used to determine who is allowed to create, delete, or modify RDS instances.
SQL DM for MySQL needs the following permissions to fetch the log files:
...
For fetching the OS metrics, the following permission is needed:
...
You can restrict the Resource for the above policy using this link. this
Newtab2 | ||||
---|---|---|---|---|
|
You can use the default policy CloudWatchReadOnlyAccess provided by AWS for OS monitoring, in case you don't do not want to create a custom policy. Keep in mind that this policy grants more permissions than SQL DM for MySQL requires to fetch your RDS/Aurora metrics.