Amazon RDS updates to AWS managed policies - Amazon Relational Database Service

Amazon RDS updates to AWS managed policies

View details about updates to AWS managed policies for Amazon RDS since this service began tracking these changes. For automatic alerts about changes to this page, subscribe to the RSS feed on the Amazon RDS Document history page.

Change Description Date

Service-linked role permissions for Amazon RDS – Update to an existing policy

Amazon RDS added a new Amazon CloudWatch namespace to AmazonRDSPreviewServiceRolePolicy for PutMetricData.

This namespace is required for Amazon RDS to publish resource usage metrics.

For more information, see Using condition keys to limit access to CloudWatch namespaces in the Amazon CloudWatch User Guide.

June 7, 2022

Service-linked role permissions for Amazon RDS – Update to an existing policy

Amazon RDS added a new Amazon CloudWatch namespace to AmazonRDSBetaServiceRolePolicy for PutMetricData.

This namespace is required for Amazon RDS to publish resource usage metrics.

For more information, see Using condition keys to limit access to CloudWatch namespaces in the Amazon CloudWatch User Guide.

June 7, 2022

Service-linked role permissions for Amazon RDS – Update to an existing policy

Amazon RDS added a new Amazon CloudWatch namespace to AWSServiceRoleForRDS for PutMetricData.

This namespace is required for Amazon RDS to publish resource usage metrics.

For more information, see Using condition keys to limit access to CloudWatch namespaces in the Amazon CloudWatch User Guide.

April 22, 2022

Service-linked role permissions for Amazon RDS – Update to an existing policy

Amazon RDS added new permissions to the AWSServiceRoleForRDS service-linked role to manage permissions for customer-owned IP pools and local gateway route tables (LGW-RTBs).

These permissions are required for RDS on Outposts to perform Multi-AZ replication across the Outposts’ local network.

For more information, see Working with Multi-AZ deployments for Amazon RDS on AWS Outposts.

April 19, 2022

Identity-based policies – Update to an existing policy

Amazon RDS added a new permission to the AmazonRDSFullAccess managed policy to describe permissions on LGW-RTBs.

This permission is required to describe permissions for RDS on Outposts to perform Multi-AZ replication across the Outposts’ local network.

For more information, see Working with Multi-AZ deployments for Amazon RDS on AWS Outposts.

April 19, 2022

Configuring access policies for Performance Insights – New policy

Amazon RDS added a new service-linked role named AmazonRDSPerformanceInsightsReadOnly to allow Amazon RDS to call AWS services on behalf of your DB instances.

March 10, 2022

Service-linked role permissions for Amazon RDS – Update to an existing policy

Amazon RDS added new Amazon CloudWatch namespaces to AWSServiceRoleForRDS for PutMetricData.

These namespaces are required for Amazon DocumentDB (with MongoDB compatibility) and Amazon Neptune to publish CloudWatch metrics.

For more information, see Using condition keys to limit access to CloudWatch namespaces in the Amazon CloudWatch User Guide.

March 4, 2022

Service-linked role permissions for Amazon RDS Custom – New policy

Amazon RDS added a new service-linked role named AWSServiceRoleForRDSCustom to allow RDS Custom to call AWS services on behalf of your DB instances.

October 26, 2021

Amazon RDS started tracking changes

Amazon RDS started tracking changes for its AWS managed policies.

October 26, 2021