AWS IAM Policy can be used to create permissions that specify which RDS actions a user, or a group of users in your AWS account can perform. IAM Policy is basically a JSON document that consists of one or more statements which defines the action to be taken on AWS resources. It can be used to determine who is allowed to create, delete, or modify RDS instances.
SQL DM for MySQL needs the following permissions to fetch the log files:
...
For fetching the OS metrics, the following permission is needed:
...
You can restrict the Resource for the above policy using this linkthis
| Newtab2 |
|---|
| alias | link |
|---|
| url | http://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements.html#Resource |
|---|
|
. In case, you want to perform either OS monitoring, or file-based log monitoring for your RDS/Aurora instance then you can include only those actions in the above policy.
You can use the default policy CloudWatchReadOnlyAccess provided by AWS for OS monitoring, in case you don't do not want to create a custom policy. Keep in mind that this policy grants more permissions than SQL DM for MySQL requires to fetch your RDS/Aurora metrics.
| Scroll pdf ignore |
|---|
IDERA Website | Products | Buy | Support | Community | About Us | Resources | Legal| alias | IDERA |
|---|
| url | http://www.idera.com |
|---|
|
| | Newtabfooter |
|---|
| alias | Products |
|---|
| url | https://www.idera.com/productssolutions/sqlserver |
|---|
|
| | Newtabfooter |
|---|
| alias | Purchase |
|---|
| url | https://www.idera.com/buynow/onlinestore |
|---|
|
| | Newtabfooter |
|---|
| alias | Support |
|---|
| url | https://idera.secure.force.com/ |
|---|
|
| | Newtabfooter |
|---|
| alias | Community |
|---|
| url | http://community.idera.com |
|---|
|
|| Newtabfooter |
|---|
| alias | Resources |
|---|
| url | http://www.idera.com/resourcecentral |
|---|
|
| | Newtabfooter |
|---|
| alias | About Us |
|---|
| url | http://www.idera.com/about/aboutus |
|---|
|
| | Newtabfooter |
|---|
| alias | Legal |
|---|
| url | https://www.idera.com/legal/termsofuse |
|---|
|
|