exporting-rds-to-s3
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFE
Full Analysis
- IAM Role and Policy Management: The skill guides the creation of IAM roles and policies to grant the RDS service permission to export data to S3. This includes using trust policies with conditions like aws:SourceAccount and aws:SourceArn, which is a recommended security practice for cross-service authorization.\n- AWS Service Operations: The instructions involve standard AWS CLI commands to interact with RDS, S3, and KMS. These are intended behaviors for managing database snapshots and migrating data within the AWS ecosystem.\n- Resource Cleanup Guidance: It includes instructions for deleting manual snapshots and temporary IAM resources once the export is complete. This aligns with operational security best practices for minimizing the attack surface and managing costs.
Audit Metadata