AWS Route 53 (IAM)

aws networking

Amazon Route 53 is a scalable and highly available Domain Name System (DNS) web service for routing end users to internet applications.

Common permissions

route53:ListHostedZonesroute53:GetHostedZoneroute53:ListResourceRecordSetsroute53:ListHealthChecksroute53:GetHealthCheckroute53:ListTrafficPoliciesroute53:GetTrafficPolicyroute53:ListTagsForResources

Least-privilege example

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "route53:ListHostedZones",
        "route53:GetHostedZone",
        "route53:ListResourceRecordSets",
        "route53:ListHealthChecks",
        "route53:GetHealthCheck",
        "route53:ListTrafficPolicies",
        "route53:GetTrafficPolicy",
        "route53:ListTagsForResources"
      ],
      "Resource": "*"
    }
  ]
}

Warnings

Avoid route53:* — grants full control including hosted zone deletion and record modification
Avoid route53:DeleteHostedZone unless needed — can break DNS resolution for entire domains

Resources

AWS referenceservicereference.us-east-1.amazonaws.com/v1/route53/route53.json ↗

API

full doc /v1/iam/route53