IAM / networking / route53

AWS Route 53 (IAM)

JSON →
AWSroute53networking

Amazon Route 53 is a scalable and highly available Domain Name System (DNS) web service for routing end users to internet applications.

iamaws
docs ↗
Permissions
Actions in this service
route53:ListHostedZones
route53:GetHostedZone
route53:ListResourceRecordSets
route53:ListHealthChecks
route53:GetHealthCheck
route53:ListTrafficPolicies
route53:GetTrafficPolicy
route53:ListTagsForResources
Policy
Minimal privilege example

Copy-paste least-privilege policy statement — not yet harness-verified.

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "route53:ListHostedZones", "route53:GetHostedZone", "route53:ListResourceRecordSets", "route53:ListHealthChecks", "route53:GetHealthCheck", "route53:ListTrafficPolicies", "route53:GetTrafficPolicy", "route53:ListTagsForResources" ], "Resource": "*" } ] }
SDK mapping
Method → permission

SDK method mapping (e.g. boto3.get_object() → s3:GetObject) is not yet collected.

Footguns
Known gotchas
Avoid route53:* — grants full control including hosted zone deletion and record modification
Avoid route53:DeleteHostedZone unless needed — can break DNS resolution for entire domains
Resources
docshttps://servicereference.us-east-1.amazonaws.com/v1/route53/route53.json ↗