AWS QLDB (IAM)

AWSqldbdatabase

Amazon Quantum Ledger Database (QLDB) is a fully managed ledger database that provides a transparent, immutable, and cryptographically verifiable transaction log.

iamaws

docs ↗

Permissions

Actions in this service

qldb:GetBlock

qldb:GetDigest

qldb:GetRevision

qldb:ListLedgers

qldb:DescribeLedger

qldb:ListTagsForResource

qldb:TagResource

Policy

Minimal privilege example

Copy-paste least-privilege policy statement — not yet harness-verified.

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "qldb:GetBlock", "qldb:GetDigest", "qldb:GetRevision", "qldb:ListLedgers", "qldb:DescribeLedger", "qldb:ListTagsForResource", "qldb:TagResource" ], "Resource": "*" } ] }

SDK mapping

Method → permission

SDK method mapping (e.g. boto3.get_object() → s3:GetObject) is not yet collected.

Footguns

Known gotchas

Avoid qldb:* — grants full control including ledger deletion and permission mode changes.

Avoid qldb:DeleteLedger — can permanently remove a ledger and all its immutable data.

Resources

docshttps://servicereference.us-east-1.amazonaws.com/v1/qldb/qldb.json ↗