AWS RDS and Admin Access

Question

Hi
If I have 3 users in a cloud account:
USER1 = FULL ADMIN
USER2= RDS ADMIN
USER3 = POWERUSER

Which policies or role you will grant to each account?
Would it be "AdministratorAccess" for user 1,
"AmazonRDSFullAccess" for user 2,
"PowerUserAccess" for user 3?

I assume AmazonRDSFullACCESS covers all functions needed to do anything related to RDS?

Accepted Answer

AmazonRDSFullAccess Policy: Provides full access to Amazon RDS via the AWS Management Console. So yes it gives full access to RDS.
PowerUserAccess: Provides full access to AWS services and resources, but does not allow management of Users and groups.
AdministratorAccess: Provides full access to AWS services and resources.

Please accept my answer if this works for you.

Answer

Yes PowerUserAccess as I mentioned - Provides "full access to AWS services and resources", but does not allow management of Users and groups. A Power User Access provides Administrator Access without the capability to manage the users and permissions. In other words, a user with Power User Access can create, delete, modify or see the resources, but he cannot grant permissions to other users.

Here is the documentation that details the JSON policy document: https://docs.aws.amazon.com/aws-managed-policy/latest/reference/PowerUserAccess.html

Alternatively, from AWS management console, if you go to IAM -> Policies -> Find "PowerUserAccess", click on it and you will see all the services and access level under permissions tab. Screen shot attached below:

![IAM policies](/media/postImages/original/IMr1CwNlDlSFSXHP7kHS_hBA)

AWS RDS and Admin Access

Relevant content