Attaching the AmazonRDSPerformanceInsightsReadOnly policy to an IAM principal - Amazon Relational Database Service
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Attaching the AmazonRDSPerformanceInsightsReadOnly policy to an IAM principal

AmazonRDSPerformanceInsightsReadOnly is an Amazon managed policy that grants access to all read-only operations of the Amazon RDS Performance Insights API.

If you attach AmazonRDSPerformanceInsightsReadOnly to a permission set or role, you must also attach the following CloudWatch permissions:

  • GetMetricStatistics

  • ListMetrics

  • GetMetricData

With these permissions, the recipient can use Performance Insights with other console features.

For more information about CloudWatch permissions, see Amazon CloudWatch permissions reference.

For more information about AmazonRDSPerformanceInsightsReadOnly, see Amazon managed policy: AmazonRDSPerformanceInsightsReadOnly.