Merge pull request #184 from alinabuzachis/policy_rds_cluster_snapshot

Add policy for rds_cluster_snapshot
mattclay · Jan 14, 2022 · 5648a34 · 5648a34
2 parents dd5c1eb + 0e7f6b4
commit 5648a34
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/aws/policy/data-services.yaml b/aws/policy/data-services.yaml
@@ -96,6 +96,8 @@ Statement:
       - rds:CreateOptionGroup
       - rds:ModifyOptionGroup
       - rds:DeleteOptionGroup
+      - rds:CreateDBClusterSnapshot
+      - rds:DeleteDBClusterSnapshot
       - rds:CreateDBSnapshot
       - rds:DeleteDBSnapshot
     Resource:
@@ -115,6 +117,7 @@ Statement:
       - 'arn:aws:rds:{{ aws_region }}:{{ aws_account_id }}:og:*'
       - 'arn:aws:dms:{{ aws_region }}:{{ aws_account_id }}:endpoint:*'
       - 'arn:aws:rds:{{ aws_region }}:{{ aws_account_id }}:snapshot:*'
+      - 'arn:aws:rds:{{ aws_region }}:{{ aws_account_id }}:cluster-snapshot:*'
   - Sid: AllowGlobalRestrictedResourceActionsWhichIncurFees
     Effect: Allow
     Action: