Amazon RDS Switchover Read Replica execution block sample policy - Amazon Application Recovery Controller (ARC)
Services or capabilities described in AWS documentation might vary by Region. To see the differences applicable to the AWS European Sovereign Cloud Region, see the AWS European Sovereign Cloud User Guide.

Amazon RDS Switchover Read Replica execution block sample policy

The following is a sample policy to attach if you add execution blocks to a Region switch plan for Amazon RDS Oracle read replica switchover. 

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "rds:DescribeDBInstances",
        "rds:SwitchoverReadReplica",
        "rds:DescribePendingMaintenanceActions",
        "rds:ModifyDBInstance"
      ],
      "Resource": [
        "arn:aws:rds:region:account-id:db:instance-name"
      ]
    }
  ]
}

If you configure an ungraceful behavior (promoteReadReplica), add the following action to the policy:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "rds:DescribeDBInstances",
        "rds:SwitchoverReadReplica",
        "rds:DescribePendingMaintenanceActions",
        "rds:PromoteReadReplica",
        "rds:ModifyDBInstance"
      ],
      "Resource": [
        "arn:aws:rds:region:account-id:db:instance-name"
      ]
    }
  ]
}