AmazonRoute53AutoNamingReadOnlyAccess
Summary
Provides read-only access to all Route 53 Auto Naming actions.
Permissions imported from the AWS Managed Policy Reference Guide; other sections pending editorial review.
Identity
- ARN
arn:aws:iam::aws:policy/AmazonRoute53AutoNamingReadOnlyAccess- Default version
- v1
- Created
- Last edited
- Services
- servicediscovery
Control-plane actions (12)
By access level: 1 List, 11 Read.
| Service | Granted | Access levels and limits | Granted by |
|---|---|---|---|
| Cloud Map | 12 of 31 | 1 List, 11 Read; 0 restricted, 0 conditional | servicediscovery:Get*, servicediscovery:List* |
Cloud Map: 12 actions
- servicediscovery:GetInstance (Read)
- servicediscovery:GetInstancesHealthStatus (Read)
- servicediscovery:GetNamespace (Read)
- servicediscovery:GetOperation (Read)
- servicediscovery:GetResourcePolicy (Read)
- servicediscovery:GetService (Read)
- servicediscovery:GetServiceAttributes (Read)
- servicediscovery:ListInstances (Read)
- servicediscovery:ListNamespaces (Read)
- servicediscovery:ListOperations (List)
- servicediscovery:ListServices (Read)
- servicediscovery:ListTagsForResource (Read)
Data-plane actions (0)
By access level: none.
This policy grants no actions in this plane.
Excluded and conditional actions
No patterns are excluded by NotAction or Deny statements.
Resource scope and attachment
Resource scope across granted actions: all-resources.
Can be attached: Yes, to users, groups and roles.
Why this tier
- Grants only List and Read actions.
Guidance
Pending editorial review. The permission data on this page comes straight from AWS; this section will be filled in once a reviewed guide exists.
Related policies
Same service
- AmazonECSServiceRolePolicy
- AmazonRoute53AutoNamingFullAccess
- AmazonRoute53AutoNamingRegistrantAccess
- AWSAppMeshPreviewServiceRolePolicy
- AWSAppMeshServiceRolePolicy
- AWSCloudMapDiscoverInstanceAccess
- AWSCloudMapFullAccess
- AWSCloudMapReadOnlyAccess
Same domain
- AmazonAPIGatewayAdministrator
- AmazonAPIGatewayInvokeFullAccess
- AmazonApplicationRecoveryControllerRegionSwitchPlanExecutionPolicy
- AmazonECSInfrastructureRoleforExpressGatewayServices
- AmazonECSInfrastructureRoleForGatewayHostSharedALB
- AmazonECSInfrastructureRolePolicyForLoadBalancers
- AmazonECSInfrastructureRolePolicyForVpcLattice
- AmazonEKSClusterPolicy
Frequently asked questions
Pending editorial review. The permission data on this page comes straight from AWS; this section will be filled in once a reviewed guide exists.
Policy JSON
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"servicediscovery:Get*",
"servicediscovery:List*"
],
"Resource": [
"*"
]
}
]
}
Version history
Current version v1, edited by AWS on 2018-01-18. Version history is recorded from 2026-11-11. Earlier versions are in the IAM console under Policy versions.
Attach snippets
AWS CLI
aws iam attach-role-policy --role-name ROLE_NAME --policy-arn arn:aws:iam::aws:policy/AmazonRoute53AutoNamingReadOnlyAccess
aws iam attach-user-policy --user-name USER_NAME --policy-arn arn:aws:iam::aws:policy/AmazonRoute53AutoNamingReadOnlyAccess
aws iam attach-group-policy --group-name GROUP_NAME --policy-arn arn:aws:iam::aws:policy/AmazonRoute53AutoNamingReadOnlyAccessCloudFormation
Resources:
ExampleRole:
Type: AWS::IAM::Role
Properties:
AssumeRolePolicyDocument: {} # replace with your trust policy
ManagedPolicyArns:
- arn:aws:iam::aws:policy/AmazonRoute53AutoNamingReadOnlyAccessTerraform
resource "aws_iam_role_policy_attachment" "amazonroute53autonamingreadonlyaccess" {
role = aws_iam_role.example.name
policy_arn = "arn:aws:iam::aws:policy/AmazonRoute53AutoNamingReadOnlyAccess"
}CDK (TypeScript)
role.addManagedPolicy(
iam.ManagedPolicy.fromAwsManagedPolicyName("AmazonRoute53AutoNamingReadOnlyAccess"),
);Sources
Pending editorial review. No editorial sources are listed yet.