Configuring access policies for Database Insights

To access Database Insights, a principal must have the appropriate permissions from Amazon Identity and Access Management (IAM).

Note

To use Database Insights with a customer-managed key, grant users the kms:Decrypt and kms:GenerateDataKey permissions for your Amazon Amazon KMS key.

Access Database Insights using these methods:

Attach the AmazonRDSPerformanceInsightsReadOnly managed policy for read-only access
Attach the AmazonRDSPerformanceInsightsFullAccess managed policy for access to all operations of the Database Insights API
Create a custom IAM policy with specific permissions
Configure Amazon KMS permissions for encrypted Database Insights data
Set up fine-grained access using resource-level permissions
Use tag-based access control to manage permissions through resource tags

Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Turn on the Performance Schema for Amazon RDS for MariaDB or MySQL

Attaching the AmazonRDSPerformanceInsightsReadOnly policy to an IAM principal