{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": [
                "rds:StartDBCluster",
                "rds:ResetDBParameterGroup",
                "rds:DescribeEngineDefaultParameters",
                "rds:CreateOptionGroup",
                "rds:CreateDBSubnetGroup",
                "rds:PurchaseReservedDBInstancesOffering",
                "rds:ModifyDBParameterGroup",
                "rds:AddSourceIdentifierToSubscription",
                "rds:DownloadDBLogFilePortion",
                "rds:CopyDBParameterGroup",
                "rds:AddRoleToDBCluster",
                "rds:ModifyDBClusterParameterGroup",
                "rds:ModifyDBClusterSnapshotAttribute",
                "rds:DeleteDBInstance",
                "rds:StopDBCluster",
                "rds:CreateDBParameterGroup",
                "rds:DescribeDBSnapshots",
                "rds:DeleteDBSnapshot",
                "rds:DescribeDBSecurityGroups",
                "rds:PromoteReadReplica",
                "rds:DeleteDBSubnetGroup",
                "rds:CreateDBSnapshot",
                "rds:DescribeValidDBInstanceModifications",
                "rds:DeleteDBSecurityGroup",
                "rds:DescribeOrderableDBInstanceOptions",
                "rds:ModifyDBCluster",
                "rds:CreateDBClusterSnapshot",
                "rds:DeleteDBParameterGroup",
                "rds:DescribeCertificates",
                "rds:CreateDBClusterParameterGroup",
                "rds:ModifyDBSnapshotAttribute",
                "rds:RemoveTagsFromResource",
                "rds:DescribeOptionGroups",
                "rds:CreateEventSubscription",
                "rds:ModifyOptionGroup",
                "rds:RestoreDBClusterFromSnapshot",
                "rds:DescribeDBEngineVersions",
                "rds:DescribeDBSubnetGroups",
                "rds:DescribeDBParameterGroups",
                "rds:DescribeReservedDBInstancesOfferings",
                "rds:DeleteOptionGroup",
                "rds:FailoverDBCluster",
                "rds:DeleteEventSubscription",
                "rds:RemoveSourceIdentifierFromSubscription",
                "rds:DescribeDBInstances",
                "rds:DescribeEngineDefaultClusterParameters",
                "rds:RevokeDBSecurityGroupIngress",
                "rds:DescribeDBParameters",
                "rds:DescribeEventCategories",
                "rds:ModifyCurrentDBClusterCapacity",
                "rds:DeleteDBCluster",
                "rds:ResetDBClusterParameterGroup",
                "rds:RestoreDBClusterToPointInTime",
                "rds:DescribeEvents",
                "rds:AddTagsToResource",
                "rds:DescribeDBClusterSnapshotAttributes",
                "rds:DescribeDBClusterParameters",
                "rds:DescribeEventSubscriptions",
                "rds:CopyDBSnapshot",
                "rds:CopyDBClusterSnapshot",
                "rds:ModifyEventSubscription",
                "rds:DescribeDBLogFiles",
                "rds:CopyOptionGroup",
                "rds:DescribeDBSnapshotAttributes",
                "rds:DeleteDBClusterSnapshot",
                "rds:ListTagsForResource",
                "rds:CreateDBCluster",
                "rds:CreateDBSecurityGroup",
                "rds:RebootDBInstance",
                "rds:DescribeDBClusterSnapshots",
                "rds:DescribeOptionGroupOptions",
                "rds:DownloadCompleteDBLogFile",
                "rds:DeleteDBClusterParameterGroup",
                "rds:ApplyPendingMaintenanceAction",
                "rds:DescribeAccountAttributes",
                "rds:DescribeDBClusters",
                "rds:DescribeDBClusterParameterGroups",
                "rds:ModifyDBSubnetGroup"
            ],
            "Resource": "*",
            "Condition": {
                "StringEqualsIfExists": {
                    "rds:DatabaseClass": "db.t2.small"
                }
            }
        }
    ]
}