docdb-elastic:RestoreClusterFromSnapshot
Literal appearances in AWS managed IAM policies. Statements that use wildcards (for example s3:*) are not counted here. This is not an IAM authorization simulation.
Policies (any)
2
Allow (Action)
2
Deny (Action)
0
NotAction
0
Index generated 4/7/2026, 3:29:24 AM. 559 policies include at least one wildcard action string (any service).
Action reference
SAR-style (unofficial)Service: Amazon DocumentDB Elastic Clusters
Access level
WriteDescription
Grants permission to restore cluster from a Amazon DocDB-Elastic cluster snapshot
Resource types
- cluster*
- cluster-snapshot*
Dependent actions
- docdb-elastic:CreateCluster
- ec2:CreateVpcEndpoint
- ec2:DeleteVpcEndpoints
- ec2:DescribeAvailabilityZones
- ec2:DescribeSecurityGroups
- ec2:DescribeSubnets
- ec2:DescribeVpcAttribute
- ec2:DescribeVpcEndpoints
- ec2:DescribeVpcs
- ec2:ModifyVpcEndpoint
- iam:CreateServiceLinkedRole
- kms:CreateGrant
- kms:Decrypt
- kms:DescribeKey
- kms:GenerateDataKey
- secretsmanager:DescribeSecret
- secretsmanager:GetResourcePolicy
- secretsmanager:GetSecretValue
- secretsmanager:ListSecretVersionIds
- secretsmanager:ListSecrets
Allow (Action)
Deny (Action)
NotAction
Thanks to Ian McKay for iam-dataset (MIT), structured data derived from the AWS Service Authorization Reference. Not maintained by AWS and not guaranteed current. IAMTrail's managed policy archive is separate.
Definitions bundle generated 4/7/2026, 3:29:24 AM