RDS Performance Insights provides fine grained access control

Amazon RDS (Relational Database Service) Performance Insights now provides fine-grained access control for the performance data that it collects. Customers can create new IAM policies or update existing IAM policies to enforce fine-grained access to Performance Insights data through the console or APIs.

This launch allows customers to define an access control policy for specific dimensions of the database load metric of Performance Insights. For example, customers can define a policy that allows a certain user to view SQL statistics, but denies access to view the full SQL text. Before this launch, customers could define the access control policy at the level of individual actions and resources only. With this feature, customers can restrict access to potentially sensitive dimensions such as SQL text, and provide access to non-sensitive dimensions on the same API action within a single IAM policy.

Amazon RDS Performance Insights is a database performance tuning and monitoring feature of RDS that allows you to visually assess the load on your database and determine when and where to take action. With one click in the Amazon RDS Management Console, you can add a fully-managed performance monitoring solution to your Amazon RDS database.