Amazon Neptune (IAM)

AWSneptune-dbdatabase

Amazon Neptune is a fast, reliable, fully managed graph database service that makes it easy to build and run applications that work with highly connected datasets.

iamaws

docs ↗

Permissions

Actions in this service

neptune-db:GetEngineStatus

neptune-db:GetGraphSummary

neptune-db:ReadDataViaQuery

neptune-db:WriteDataViaQuery

neptune-db:GetQueryStatus

neptune-db:ListLoaderJobs

neptune-db:GetStreamRecords

neptune-db:GetStatisticsStatus

Policy

Minimal privilege example

Copy-paste least-privilege policy statement — not yet harness-verified.

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "neptune-db:GetEngineStatus", "neptune-db:GetGraphSummary", "neptune-db:ReadDataViaQuery", "neptune-db:WriteDataViaQuery", "neptune-db:GetQueryStatus", "neptune-db:ListLoaderJobs", "neptune-db:GetStreamRecords", "neptune-db:GetStatisticsStatus" ], "Resource": "*" } ] }

SDK mapping

Method → permission

SDK method mapping (e.g. boto3.get_object() → s3:GetObject) is not yet collected.

Footguns

Known gotchas

Avoid neptune-db:* — grants full control including delete/modify of data and ML endpoints

Avoid neptune-db:DeleteDataViaQuery — can delete graph data via SPARQL/Gremlin queries

Resources

docshttps://servicereference.us-east-1.amazonaws.com/v1/neptune-db/neptune-db.json ↗