{
  "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_rds-db.html",
  "name": "Amazon RDS IAM Authentication",
  "prefix": "rds-db",
  "timestamp": "1792584006",
  "actions": [
    {
      "url": "https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.IAMDBAuth.IAMPolicy.html",
      "name": "connect",
      "description": "Grants permission to connect to an RDS database from an IAM role or user",
      "access": "Permissions management",
      "resources": [
        {
          "name": "db-user",
          "is_required": true
        }
      ],
      "conditions": []
    }
  ],
  "resources": [
    {
      "url": "https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.IAMDBAuth.DBAccounts.html",
      "name": "db-user",
      "arn": "arn:${Partition}:rds-db:${Region}:${Account}:dbuser:${DbiResourceId}/${DbUserName}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    }
  ],
  "conditions": [
    {
      "url": "https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.IAMDBAuth.IAMPolicy.html",
      "name": "aws:ResourceTag/${TagKey}",
      "description": "Filters access by the tags associated with the parent RDS DB instance or Aurora DB cluster of the db-user",
      "type": "String"
    }
  ]
}