AmazonRDSEnhancedMonitoringRole - AWS Managed Policy

AmazonRDSEnhancedMonitoringRole

Description: Provides access to Cloudwatch for RDS Enhanced Monitoring

AmazonRDSEnhancedMonitoringRole is an AWS managed policy.

Using this policy

You can attach AmazonRDSEnhancedMonitoringRole to your users, groups, and roles.

Policy details

  • Type: Service role policy

  • Creation time: November 11, 2015, 19:58 UTC

  • Edited time: November 11, 2015, 19:58 UTC

  • ARN: arn:aws:iam::aws:policy/service-role/AmazonRDSEnhancedMonitoringRole

Policy version

Policy version: v1 (default)

The policy's default version is the version that defines the permissions for the policy. When a user or role with the policy makes a request to access an AWS resource, AWS checks the default version of the policy to determine whether to allow the request.

JSON policy document

{ "Version" : "2012-10-17", "Statement" : [ { "Sid" : "EnableCreationAndManagementOfRDSCloudwatchLogGroups", "Effect" : "Allow", "Action" : [ "logs:CreateLogGroup", "logs:PutRetentionPolicy" ], "Resource" : [ "arn:aws:logs:*:*:log-group:RDS*" ] }, { "Sid" : "EnableCreationAndManagementOfRDSCloudwatchLogStreams", "Effect" : "Allow", "Action" : [ "logs:CreateLogStream", "logs:PutLogEvents", "logs:DescribeLogStreams", "logs:GetLogEvents" ], "Resource" : [ "arn:aws:logs:*:*:log-group:RDS*:log-stream:*" ] } ] }

Learn more