Amazon Route 53 Profiles now supports granular AWS Identity and Access Management (IAM) permissions, allowing you to control which users can manage specific resource types and VPC associations within your Profiles. With this launch, you can create IAM policies that restrict users to specific operations (associate, disassociate, or update) on individual resource types such as private hosted zones, Resolver rules, or DNS Firewall rule groups. You can also define permissions based on resource ARNs, hosted zone names, Resolver rule domain names, DNS Firewall rule group priority ranges, or specific VPC associations.
Route 53 Profiles enable you to define a standard DNS configuration that includes private hosted zone associations, Resolver rules, and DNS Firewall rule groups, and apply this configuration to multiple VPCs in your account or share with AWS accounts using AWS Resource Access Manager (RAM). This new capability provides administrators with fine-grained control over Profile management, enabling you to delegate specific responsibilities while maintaining security and governance standards across your organization.
This feature is available at no additional charge in all AWS Regions where Route 53 Profiles is available, except in Middle East (Bahrain) and Middle East (UAE). To learn more, see the Amazon Route 53 Profiles documentation and pricing page.
Categories: general:products/amazon-route-53,marketing:marchitecture/networking-and-content-delivery
Source: Amazon Web Services
Latest Posts
- Amazon Connect Customer now supports embedding Cases and Customer Profiles in custom agent applications
- Collect Diagnostics change to Get Diagnostics for Outlook Mobile and Mac [MC1308855]
- Action required: Upgrade macOS 13 devices to maintain Teams desktop access [MC1308857]
- Microsoft 365 Copilot (including Copilot Chat): Admin notifications for Copilot mobile app on macOS [MC1308856]
