12 AWS Permissions
dbeaver-devops edited this page 2025-09-15 15:27:21 +00:00

Table of contents

To use DBeaver with AWS, certain permissions are required for different actions. Below is a summary of the necessary permissions and their purposes.

Required permissions

Service Read Policy Write Policy
Login -
Cloud Explorer -
S3 AmazonS3ReadOnlyAccess AmazonS3FullAccess
Redshift AmazonRedshiftReadOnlyAccess AmazonRedshiftFullAccess
RDS AmazonRDSReadOnlyAccess AmazonRDSFullAccess
DynamoDB AmazonDynamoDBReadOnlyAccess AmazonDynamoDBFullAccess
DocumentDB AmazonDocDBReadOnlyAccess AmazonDocDBFullAccess
Keyspaces AmazonKeyspacesReadOnlyAccess AmazonKeyspacesFullAccess
Athena "lakeformation:Describe*",
"lakeformation:Get*",
"lakeformation:List*",
"sns:ListTopics",
"sns:GetTopicAttributes",
"s3:Describe*",
"s3:Get*",
"s3:List*",
"s3:Put*",
"glue:Get*",
"glue:List*",
"glue:BatchGet*",
"athena:List*",
"athena:Get*",
"athena:Batch*",
"athena:StartQueryExecution",
"athena:StopQueryExecution"
AmazonAthenaFullAccess
Redis AmazonElastiCacheReadOnlyAccess AmazonElastiCacheFullAccess
SSO