doc-exports/docs/das/umn/das_10_0030.html

How Do I Grant Only the Permission to Use DAS to an IAM User?

1. Create a user-defined policy for DAS.

   On the management console, choose Service List > Management & Governance > Identity and Access Management. On the displayed page, select Permissions and click Create Custom Policy.

2. Select the rds:instance:list permission of RDS and das:connections:list permission of DAS.
   

   You can also select JSON for Policy View and enter the following statements in Policy Content.

   {
       "Version": "1.1",
       "Statement": [
           {
               "Action": [
                   "rds:instance:list"
               ],
               "Effect": "Allow"
           },
           {
               "Action": [
                   "das:connections:list"
               ],
               "Effect": "Allow"
           }
       ]
   }

3. Create a DAS user group. Then, click Manage Permissions in the Operation column to select the custom permissions.
4. Create an IAM user and add it to the user group.

Parent topic: Usage