Skip to content

Instantly share code, notes, and snippets.

@dfox
Created January 25, 2012 16:45
Show Gist options
  • Save dfox/1677191 to your computer and use it in GitHub Desktop.
Save dfox/1677191 to your computer and use it in GitHub Desktop.
An IAM policy for Amazon AWS to allow limited access to Route 53
{
"Statement":[
{
"Action":[
"route53:ChangeResourceRecordSets",
"route53:GetHostedZone",
"route53:ListResourceRecordSets"
],
"Effect":"Allow",
"Resource":[
"arn:aws:route53:::hostedzone/<Your zone ID>"
]
},
{
"Action":[
"route53:ListHostedZones"
],
"Effect":"Allow",
"Resource":[
"*"
]
}
]
}
@theTestTube
Copy link

"route53:GetChange" action must be allowed for "--wait" parameter to work

Many thanks for your script!

@igg
Copy link

igg commented Dec 22, 2015

Need to add the following line after the opening brace:

      "Version": "2012-10-17",

@philvarner
Copy link

Thanks! this is the only example I've been able to find of what the Resource ARN is supposed to look like.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment