Backup RDS Databases - Additional IAM Policy

This policy contains the permissions needed for the backup of RDS instances scheduled tasks.

If you are using the Ylastic Administrator user, you do NOT need this additional policy. This policy is only required if you are using the Ylastic Read only user.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "kms:ListAliases",
        "rds:AddTagsToResource",
        "rds:CopyDBClusterSnapshot",
        "rds:CopyDBSnapshot",
        "rds:CreateDBClusterSnapshot",
        "rds:CreateDBSnapshot",
        "rds:DeleteDBClusterSnapshot",
        "rds:DeleteDBSnapshot",
        "rds:DescribeDBClusters",
        "rds:DescribeDBInstances",
        "rds:DescribeDBClusterSnapshots",
        "rds:DescribeDBSnapshots",
        "rds:ListTagsForResource",
        "rds:RemoveTagsFromResource",
        "sts:DecodeAuthorizationMessage"
      ],
      "Resource": "*"
    }
  ]
}