_README.md

Need to replace:

• 123xxxxxxxxx should be replaced with your Account ID (can be found at the top of your “My Account” page on AWS)
• InstanceName should be replaced with the name of your Elastic Beanstalk application
• If you are not using West Europe region you should replace eu-west-1 with the correct region code, e,g. us-east-1

RDSInstanceBased.json

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "Global",
      "Effect": "Allow",
      "Action": [
        "rds:DescribeEngineDefaultParameters",
        "rds:DescribeDBInstances",
        "rds:DescribeDBParameterGroups",
        "rds:DescribeDBParameters",
        "rds:DescribeDBSecurityGroups",
        "rds:DescribeDBSnapshots",
        "rds:DescribeDBEngineVersions",
        "rds:DescribeDBSubnetGroups",
        "rds:DescribeEventCategories",
        "rds:DescribeEventSubscriptions",
        "rds:DescribeOptionGroups",
        "rds:DescribeOptionGroupOptions",
        "rds:DescribeOrderableDBInstanceOptions",
        "rds:DescribeReservedDBInstances",
        "rds:DescribeReservedDBInstancesOfferings",
        "ec2:DescribeAvailabilityZones",
        "ec2:DescribeVpcs",
        "ec2:DescribeAccountAttributes",
        "ec2:DescribeSecurityGroups",
        "ec2:DescribeSubnets",
        "cloudwatch:GetMetricStatistics",
        "cloudwatch:DescribeAlarms"
      ],
      "Resource": [
        "*"
      ]
    },
    {
      "Sid": "Instance",
      "Effect": "Allow",
      "Action": [
        "rds:ListTagsForResource",
        "rds:DownloadDBLogFilePortion",
        "rds:RebootDBInstance",
        "rds:DescribeDBLogFiles",
        "rds:DescribeEvents",
        "rds:DownloadDBLogFilePortion"
      ],
      "Resource": [
        "arn:aws:rds:eu-west-1:123xxxxxxxxx:db:InstanceName"
      ]
    },
    {
      "Sid": "Snapshots",
      "Effect": "Allow",
      "Action": [
        "rds:CreateDBSnapshot"
      ],
      "Resource": [
        "arn:aws:rds:eu-west-1:123xxxxxxxxx:snapshot:*"
      ]
    }
  ]
}