IAM / database / elasticache

AWS ElastiCache (IAM)

JSON →

AWSelasticachedatabase

A fully managed in-memory caching service that supports Redis and Memcached to improve application performance.

iamaws

docs ↗

Permissions

Actions in this service

elasticache:DescribeCacheClusters

elasticache:DescribeReplicationGroups

elasticache:DescribeSnapshots

elasticache:DescribeEvents

elasticache:DescribeCacheParameterGroups

elasticache:DescribeCacheSubnetGroups

elasticache:ListTagsForResource

Policy

Minimal privilege example

Copy-paste least-privilege policy statement — not yet harness-verified.

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "elasticache:DescribeCacheClusters", "elasticache:DescribeReplicationGroups", "elasticache:DescribeSnapshots", "elasticache:DescribeEvents", "elasticache:DescribeCacheParameterGroups", "elasticache:DescribeCacheSubnetGroups", "elasticache:ListTagsForResource" ], "Resource": "*" } ] }

SDK mapping

Method → permission

SDK method mapping (e.g. boto3.get_object() → s3:GetObject) is not yet collected.

Footguns

Known gotchas

Avoid elasticache:* — grants full control including creating, modifying, and deleting cache clusters and data.

Avoid elasticache:DeleteCacheCluster — allows deletion of cache clusters, causing data loss and application impact.

Resources

docshttps://servicereference.us-east-1.amazonaws.com/v1/elasticache/elasticache.json ↗