Amazon RDS updates to Amazon managed policies - Amazon Aurora
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Amazon RDS updates to Amazon managed policies

View details about updates to Amazon managed policies for Amazon RDS since this service began tracking these changes. For automatic alerts about changes to this page, subscribe to the RSS feed on the Amazon RDS Document history page.

Change Description Date

Amazon managed policies for Amazon RDS – Update to existing policy

Amazon RDS added new permissions to AmazonRDSFullAccess managed policy. The permissions allow you to generate, view, and delete the performance analysis report for a time period.

For more information about configuring access policies for Performance Insights, see Configuring access policies for Performance Insights

August 17, 2023

Amazon managed policies for Amazon RDS – New policy and update to existing policy

Amazon RDS added new permissions to AmazonRDSPerformanceInsightsReadOnly managed policy and a new managed policy named AmazonRDSPerformanceInsightsFullAccess. These permissions allow you to analyse the Performance Insights for a time period, view the analysis results along with the recommendations, and delete the reports.

For more information about configuring access policies for Performance Insights, see Configuring access policies for Performance Insights

August 16, 2023

Amazon managed policies for Amazon RDS – Update to an existing policy

Amazon RDS added a new Amazon CloudWatch namespace ListMetrics to AmazonRDSFullAccess and AmazonRDSReadOnlyAccess.

This namespace is required for Amazon RDS to list specific resource usage metrics.

For more information, see Overview of managing access permissions to your CloudWatch resources in the Amazon CloudWatch User Guide.

April 4, 2023

Service-linked role permissions for Amazon Aurora – Update to an existing policy

Amazon RDS added new permissions to the AmazonRDSServiceRolePolicy of the AWSServiceRoleForRDS service-linked role for integration with Amazon Secrets Manager. RDS requires integration with Secrets Manager for managing master user passwords in Secrets Manager. The secret uses a reserved naming convention and restricts customer updates.

For more information, see Password management with Amazon Aurora and Amazon Secrets Manager.

December 22, 2022

Amazon managed policies for Amazon RDS – Update to existing policies

Amazon RDS added a new permission to the AmazonRDSFullAccess and AmazonRDSReadOnlyAccess managed policies to allow you to turn on Amazon DevOps Guru in the RDS console. This permission is required to check whether DevOps Guru is turned on.

For more information, see Configuring IAM access policies for DevOps Guru for RDS.

December 19, 2022

Service-linked role permissions for Amazon Aurora – Update to an existing policy

Amazon RDS added a new Amazon CloudWatch namespace to AmazonRDSPreviewServiceRolePolicy for PutMetricData.

This namespace is required for Amazon RDS to publish resource usage metrics.

For more information, see Using condition keys to limit access to CloudWatch namespaces in the Amazon CloudWatch User Guide.

June 7, 2022

Service-linked role permissions for Amazon Aurora – Update to an existing policy

Amazon RDS added a new Amazon CloudWatch namespace to AmazonRDSBetaServiceRolePolicy for PutMetricData.

This namespace is required for Amazon RDS to publish resource usage metrics.

For more information, see Using condition keys to limit access to CloudWatch namespaces in the Amazon CloudWatch User Guide.

June 7, 2022

Service-linked role permissions for Amazon Aurora – Update to an existing policy

Amazon RDS added a new Amazon CloudWatch namespace to AWSServiceRoleForRDS for PutMetricData.

This namespace is required for Amazon RDS to publish resource usage metrics.

For more information, see Using condition keys to limit access to CloudWatch namespaces in the Amazon CloudWatch User Guide.

April 22, 2022

Amazon managed policies for Amazon RDS – New policy

Amazon RDS added a new managed policy named AmazonRDSPerformanceInsightsReadOnly to allow Amazon RDS to call Amazon services on behalf of your DB instances.

For more information about configuring access policies for Performance Insights, see Configuring access policies for Performance Insights

March 10, 2022

Service-linked role permissions for Amazon Aurora – Update to an existing policy

Amazon RDS added new Amazon CloudWatch namespaces to AWSServiceRoleForRDS for PutMetricData.

These namespaces are required for Amazon DocumentDB (with MongoDB compatibility) and Amazon Neptune to publish CloudWatch metrics.

For more information, see Using condition keys to limit access to CloudWatch namespaces in the Amazon CloudWatch User Guide.

March 4, 2022

Amazon RDS started tracking changes

Amazon RDS started tracking changes for its Amazon managed policies.

October 26, 2021