IAM / database / docdb-elastic

Amazon DocumentDB (with MongoDB compatibility) Elastic Clusters (IAM)

JSON →
AWSdocdb-elasticdatabase

Amazon DocumentDB Elastic Clusters is a fully managed, scalable document database service that supports MongoDB-compatible workloads with elastic scalability.

iamaws
Permissions
Actions in this service
docdb-elastic:GetCluster
docdb-elastic:ListClusters
docdb-elastic:StartCluster
docdb-elastic:StopCluster
docdb-elastic:CreateCluster
docdb-elastic:UpdateCluster
docdb-elastic:GetClusterSnapshot
docdb-elastic:ListClusterSnapshots
Policy
Minimal privilege example

Copy-paste least-privilege policy statement — not yet harness-verified.

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "docdb-elastic:GetCluster", "docdb-elastic:ListClusters", "docdb-elastic:StartCluster", "docdb-elastic:StopCluster", "docdb-elastic:CreateCluster", "docdb-elastic:UpdateCluster", "docdb-elastic:GetClusterSnapshot", "docdb-elastic:ListClusterSnapshots" ], "Resource": "*" } ] }
SDK mapping
Method → permission

SDK method mapping (e.g. boto3.get_object()s3:GetObject) is not yet collected.

Footguns
Known gotchas
Avoid docdb-elastic:* — grants full control including delete/modify of clusters and snapshots
Avoid docdb-elastic:DeleteCluster — can permanently delete clusters and all data
Resources