本文属于机器翻译版本。若本译文内容与英语原文存在差异，则一律以英文原文为准。

# Amazon RDS 切换只读副本执行区块示例策略
<a name="security_iam_region_switch_rds_switchover_read_replica"></a>

 以下是在 Amazon RDS Oracle 只读副本切换的区域切换计划中添加执行块时要附加的示例策略。

```
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "rds:DescribeDBInstances",
        "rds:SwitchoverReadReplica",
        "rds:DescribePendingMaintenanceActions",
        "rds:ModifyDBInstance"
      ],
      "Resource": [
        "arn:aws:rds:{{region}}:{{account-id}}:db:{{instance-name}}"
      ]
    }
  ]
}
```

如果您配置了不正当行为 (`promoteReadReplica`)，请向策略中添加以下操作：

```
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "rds:DescribeDBInstances",
        "rds:SwitchoverReadReplica",
        "rds:DescribePendingMaintenanceActions",
        "rds:PromoteReadReplica",
        "rds:ModifyDBInstance"
      ],
      "Resource": [
        "arn:aws:rds:{{region}}:{{account-id}}:db:{{instance-name}}"
      ]
    }
  ]
}
```