IAM Policies - Allows Restoring RDS Databases.

An IAM policy that allows restoring RDS databases. This policy also provides the permissions necessary to complete this action programmatically and in the console.

Policy|CloudFormation |AWS CLI

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Action": [
                "ec2:Describe*",
                "rds:CreateDBParameterGroup",
                "rds:CreateDBSnapshot",
                "rds:DeleteDBSnapshot",
                "rds:Describe*",
                "rds:DownloadDBLogFilePortion",
                "rds:List*",
                "rds:ModifyDBInstance",
                "rds:ModifyDBParameterGroup",
                "rds:ModifyOptionGroup",
                "rds:RebootDBInstance",
                "rds:RestoreDBInstanceFromDBSnapshot",
                "rds:RestoreDBInstanceToPointInTime"
            ],
            "Resource": "*",
            "Effect": "Allow"
        }
    ]
}

No policy variables to customize

* Required field

Configuration Source: AWS Documentation

Additional Documentation:

AWS Documentation: Create IAM Policies, Edit IAM Policies, and Add/Remove IAM policies.
AWS Documentation: IAM JSON Policy Overview
CloudFormation Reference Guide: Create an IAM Policy
AWS CLI Command Reference Guide: Create an IAM Policy

Security Control

Configuration Packages

Service

Solutions, Guides & Tools

Overview

Configuration Templates

Actions

Sources and Documentation