Hello, Is there a way to restrict users permissions so they cannot modify some resources, ie. developer X should not be able to edit, delete AWS RDS db resource in production? Is it doable in Atlantis?

I would do that through the IAM role/policy your user uses. That role would allow them access to atlantis but use a NotAllow in the policy to limit what you dont want them to touch. We do something similar.