Amazon Route 53 Profiles now supports granular AWS Identity and Access Management (IAM) permissions, allowing you to control which users can manage specific resource types and VPC associations within your Profiles. With this launch, you can create IAM policies that restrict users to specific operations (associate, disassociate, or update) on individual resource types such as private hosted zones, Resolver rules, or DNS Firewall rule groups. You can also define permissions based on resource ARNs, hosted zone names, Resolver rule domain names, DNS Firewall rule group priority ranges, or specific VPC associations.
Route 53 Profiles enable you to define a standard DNS configuration that includes private hosted zone associations, Resolver rules, and DNS Firewall rule groups, and apply this configuration to multiple VPCs in your account or share with AWS accounts using AWS Resource Access Manager (RAM). This new capability provides administrators with fine-grained control over Profile management, enabling you to delegate specific responsibilities while maintaining security and governance standards across your organization.
This feature is available at no additional charge in all AWS Regions where Route 53 Profiles is available, except in Middle East (Bahrain) and Middle East (UAE). To learn more, see the Amazon Route 53 Profiles documentation and pricing page.
Categories: general:products/amazon-route-53,marketing:marchitecture/networking-and-content-delivery
Source: Amazon Web Services
Latest Posts
- Amazon SageMaker Feature Store now supports SageMaker Python SDK V3
- Amazon Route 53 Domains adds support for 34 new Top Level Domains including .app, .dev, and .health.
- Amazon EventBridge Scheduler adds 619 new SDK API actions, including Lambda Managed Instances
- (Updated) Anthropic Claude is now available in Microsoft 365 Copilot [MC1247880]
