Route 53
Prefix route53, 71 actions · Domain Networking & Content Delivery
15 AWS managed policies. 5 have reviewed guidance; the rest have authoritative permission data pending editorial review. 3 are service-linked role policies, shown with permission data only.
User access (6)
Operator and limited (3)
Service roles (3)
- ROSAControlPlaneOperatorPolicyOperator
- ROSAIngressOperatorPolicyOperator
- ROSAInstallerPolicyOperator
Service-linked roles (3)
Also grants Route 53 actions (49)
- AdministratorAccess
- AdministratorAccess-Amplify
- AIDevOpsAgentAccessPolicy
- AIDevOpsAgentActionsPolicy
- AIOpsAssistantPolicy
- AmazonECS_FullAccess
- AmazonEKSServicePolicy
- AmazonEKSServiceRolePolicy
- AmazonFSxServiceRolePolicy
- AmazonLaunchWizard_Fullaccess
- AmazonLaunchWizardFullAccessV2
- AmazonRoute53DomainsFullAccess
- AmazonRoute53GlobalResolverFullAccess
- AmazonRoute53ProfilesFullAccess
- AmazonWorkMailFullAccess
- AssuranceServiceRolePolicy
- AWS_ConfigRole
- AWSAuditManagerServiceRolePolicy
- AWSCODAPermissionsBoundary
- AWSConfigServiceRolePolicy
- AWSMcpServiceActionsFullAccess
- AWSPartnerLedSupportReadOnlyAccess
- AWSResilienceHubAsssessmentExecutionPolicy
- AWSResilienceHubV2AssessmentExecutionPolicy
- AWSResourceExplorerServiceRolePolicy
- AWSResourceGroupsReadOnlyAccess
- AWSShieldDRTAccessPolicy
- AWSSupportServiceRolePolicy
- AWSTransferConsoleFullAccess
- AWSTrustedAdvisorServiceRolePolicy
- AWSVpcLatticeServiceRolePolicy
- AWSWAFConsoleFullAccess
- AWSWAFConsoleReadOnlyAccess
- AWSWellArchitectedAgentResourceScanningServiceRolePolicy
- CloudwatchApplicationInsightsServiceLinkedRolePolicy
- CloudWatchAutomaticDashboardsAccess
- CloudWatchOmniAWSIntegrationPolicy
- PowerUserAccess
- ReadOnlyAccess
- ResourceGroupsTaggingAPITagUntagSupportedResources
- ROSASRESupportPolicy
- Route53RecoveryReadinessServiceRolePolicy
- SecurityAudit
- ServiceQuotasFullAccess
- ServiceQuotasReadOnlyAccess
- SupportUser
- SystemAdministrator
- ViewOnlyAccess
- WellArchitectedAgentResourceScanning
activatekeysigningkey associatevpcwithhostedzone changecidrcollection changeresourcerecordsets changetagsforresource createcidrcollection createhealthcheck createhostedzone createkeysigningkey createqueryloggingconfig createreusabledelegationset createtrafficpolicy createtrafficpolicyinstance createtrafficpolicyversion createvpcassociationauthorization deactivatekeysigningkey deletecidrcollection deletehealthcheck deletehostedzone deletekeysigningkey deletequeryloggingconfig deletereusabledelegationset deletetrafficpolicy deletetrafficpolicyinstance deletevpcassociationauthorization disablehostedzonednssec disassociatevpcfromhostedzone enablehostedzonednssec getaccountlimit getchange getcheckeripranges getdnssec getgeolocation gethealthcheck gethealthcheckcount gethealthchecklastfailurereason gethealthcheckstatus gethostedzone gethostedzonecount gethostedzonelimit getqueryloggingconfig getreusabledelegationset getreusabledelegationsetlimit gettrafficpolicy gettrafficpolicyinstance gettrafficpolicyinstancecount listcidrblocks listcidrcollections listcidrlocations listgeolocations listhealthchecks listhostedzones listhostedzonesbyname listhostedzonesbyvpc listqueryloggingconfigs listresourcerecordsets listreusabledelegationsets listtagsforresource listtagsforresources listtrafficpolicies listtrafficpolicyinstances listtrafficpolicyinstancesbyhostedzone listtrafficpolicyinstancesbypolicy listtrafficpolicyversions listvpcassociationauthorizations testdnsanswer updatehealthcheck updatehostedzonecomment updatehostedzonefeatures updatetrafficpolicycomment updatetrafficpolicyinstance
Actions (71)
| Action | Access level | Policies granting without limits | Policies granting with resource or condition limits |
|---|---|---|---|
| route53:ActivateKeySigningKey | Write | 7 | 1 |
| route53:AssociateVPCWithHostedZone | Write | 10 | 2 |
| route53:ChangeCidrCollection | Write | 7 | 1 |
| route53:ChangeResourceRecordSets | Write | 16 | 5 |
| route53:ChangeTagsForResource | Tagging | 10 | 1 |
| route53:CreateCidrCollection | Write | 7 | 1 |
| route53:CreateHealthCheck | Write | 12 | 1 |
| route53:CreateHostedZone | Write | 12 | 1 |
| route53:CreateKeySigningKey | Write | 7 | 1 |
| route53:CreateQueryLoggingConfig | Write | 7 | 1 |
| route53:CreateReusableDelegationSet | Write | 7 | 1 |
| route53:CreateTrafficPolicy | Write | 7 | 1 |
| route53:CreateTrafficPolicyInstance | Write | 7 | 1 |
| route53:CreateTrafficPolicyVersion | Write | 7 | 1 |
| route53:CreateVPCAssociationAuthorization | Write | 7 | 1 |
| route53:DeactivateKeySigningKey | Write | 7 | 1 |
| route53:DeleteCidrCollection | Write | 7 | 1 |
| route53:DeleteHealthCheck | Write | 12 | 1 |
| route53:DeleteHostedZone | Write | 11 | 1 |
| route53:DeleteKeySigningKey | Write | 7 | 1 |
| route53:DeleteQueryLoggingConfig | Write | 7 | 1 |
| route53:DeleteReusableDelegationSet | Write | 7 | 1 |
| route53:DeleteTrafficPolicy | Write | 7 | 1 |
| route53:DeleteTrafficPolicyInstance | Write | 7 | 1 |
| route53:DeleteVPCAssociationAuthorization | Write | 7 | 1 |
| route53:DisableHostedZoneDNSSEC | Write | 7 | 1 |
| route53:DisassociateVPCFromHostedZone | Write | 7 | 1 |
| route53:EnableHostedZoneDNSSEC | Write | 7 | 1 |
| route53:GetAccountLimit | Read | 21 | 1 |
| route53:GetChange | List | 22 | 1 |
| route53:GetCheckerIpRanges | List | 17 | 1 |
| route53:GetDNSSEC | Read | 22 | 3 |
| route53:GetGeoLocation | List | 17 | 1 |
| route53:GetHealthCheck | Read | 33 | 4 |
| route53:GetHealthCheckCount | List | 17 | 1 |
| route53:GetHealthCheckLastFailureReason | List | 17 | 1 |
| route53:GetHealthCheckStatus | List | 18 | 2 |
| route53:GetHostedZone | List | 42 | 3 |
| route53:GetHostedZoneCount | List | 18 | 1 |
| route53:GetHostedZoneLimit | Read | 17 | 1 |
| route53:GetQueryLoggingConfig | Read | 18 | 1 |
| route53:GetReusableDelegationSet | List | 17 | 1 |
| route53:GetReusableDelegationSetLimit | Read | 15 | 1 |
| route53:GetTrafficPolicy | Read | 17 | 1 |
| route53:GetTrafficPolicyInstance | Read | 17 | 1 |
| route53:GetTrafficPolicyInstanceCount | Read | 17 | 1 |
| route53:ListCidrBlocks | List | 25 | 2 |
| route53:ListCidrCollections | List | 25 | 2 |
| route53:ListCidrLocations | List | 25 | 1 |
| route53:ListGeoLocations | Read | 22 | 1 |
| route53:ListHealthChecks | Read | 30 | 3 |
| route53:ListHostedZones | List | 42 | 3 |
| route53:ListHostedZonesByName | List | 36 | 1 |
| route53:ListHostedZonesByVPC | List | 22 | 1 |
| route53:ListQueryLoggingConfigs | List | 26 | 3 |
| route53:ListResourceRecordSets | List | 37 | 2 |
| route53:ListReusableDelegationSets | Read | 22 | 1 |
| route53:ListTagsForResource | Read | 25 | 3 |
| route53:ListTagsForResources | Read | 20 | 1 |
| route53:ListTrafficPolicies | List | 22 | 1 |
| route53:ListTrafficPolicyInstances | Read | 22 | 1 |
| route53:ListTrafficPolicyInstancesByHostedZone | List | 22 | 1 |
| route53:ListTrafficPolicyInstancesByPolicy | List | 22 | 1 |
| route53:ListTrafficPolicyVersions | List | 22 | 1 |
| route53:ListVPCAssociationAuthorizations | List | 22 | 1 |
| route53:TestDNSAnswer | Read | 9 | 1 |
| route53:UpdateHealthCheck | Write | 12 | 1 |
| route53:UpdateHostedZoneComment | Write | 7 | 1 |
| route53:UpdateHostedZoneFeatures | Write | 7 | 1 |
| route53:UpdateTrafficPolicyComment | Write | 7 | 1 |
| route53:UpdateTrafficPolicyInstance | Write | 7 | 1 |