Aurora DSQL API Operations and Resource-Based Policies
Resource-based policies in Aurora DSQL control access to specific API operations. The following sections list all Aurora DSQL API operations organized by category, with an indication of which ones support resource-based policies.
The Supports RBP column indicates whether the API operation is subject to resource-based policy evaluation when a policy is attached to the cluster.
Tag APIs
| API Operation |
Description |
Supports RBP |
| ListTagsForResource |
Lists the tags for a Aurora DSQL resource |
Yes |
| TagResource |
Adds tags to a Aurora DSQL resource |
Yes |
| UntagResource |
Removes tags from a Aurora DSQL resource |
Yes |
Cluster management APIs
Multi-Region property APIs
Resource-based policy APIs
| API Operation |
Description |
Supports RBP |
| DeleteClusterPolicy |
Deletes the resource-based policy from a cluster |
Yes |
| GetClusterPolicy |
Retrieves the resource-based policy for a cluster |
Yes |
| PutClusterPolicy |
Creates or updates the resource-based policy for a cluster |
Yes |
AWS Fault Injection Service APIs
| API Operation |
Description |
Supports RBP |
| InjectError |
Injects errors for fault injection testing |
No |
Backup and restore APIs