Permissions for @turbot/aws-route53resolver
Taking a look at permissions and associated grant levels for each permission for Route 53 Resolver:
| Permission | Grant Level | Help |
|---|---|---|
| ec2:DescribeAvailabilityZones | Metadata | |
| ec2:DescribeSecurityGroups | Metadata | |
| ec2:DescribeSubnets | Metadata | |
| route53resolver:AssociateResolverEndpointIpAddress | Admin | |
| route53resolver:AssociateResolverRule | Admin | |
| route53resolver:CreateResolverEndpoint | Admin | |
| route53resolver:CreateResolverRule | Admin | |
| route53resolver:DeleteResolverEndpoint | Admin | |
| route53resolver:DeleteResolverRule | Admin | |
| route53resolver:DisassociateResolverEndpointIpAddress | Admin | |
| route53resolver:DisassociateResolverRule | Admin | |
| route53resolver:GetResolverEndpoint | Metadata | |
| route53resolver:GetResolverRule | Metadata | |
| route53resolver:GetResolverRuleAssociation | Metadata | |
| route53resolver:GetResolverRulePolicy | Metadata | |
| route53resolver:ListResolverEndpointIpAddresses | Metadata | |
| route53resolver:ListResolverEndpoints | Metadata | |
| route53resolver:ListResolverRuleAssociations | Metadata | |
| route53resolver:ListResolverRules | Metadata | |
| route53resolver:ListTagsForResource | Metadata | |
| route53resolver:PutResolverRulePolicy | Admin | |
| route53resolver:TagResource | Operator | |
| route53resolver:UntagResource | Operator | |
| route53resolver:UpdateResolverEndpoint | Admin | |
| route53resolver:UpdateResolverRule | Admin |