Error: User: arn:aws:iam::502616337927:user/example is not authorized to perform: route53:ChangeResourceRecordSets on resource: arn:aws:route53:::hostedzone/W3MS19SVPW6HSSFGDHFGSHDF at Request.ext
To create a dns record, you need an IAM policy attached to the IAM user.
Create IAM Policy
{
"Version": "2012-10-17",
"Statement": [
{
"Sid" : "AllowPublicHostedZonePermissions",
"Effect": "Allow",
"Action": [
"route53:CreateHostedZone",
"route53:UpdateHostedZoneComment",
"route53:GetHostedZone",
"route53:ListHostedZones",
"route53:GetHostedZoneCount",
"route53:ListHostedZonesByName"
"route53:DeleteHostedZone",
"route53:ListResourceRecordSets",
"route53:ChangeResourceRecordSets"
],
"Resource": "*"
},
{
"Sid" : "AllowHealthCheckPermissions",
"Effect": "Allow",
"Action": [
"route53:CreateHealthCheck",
"route53:UpdateHealthCheck",
"route53:GetHealthCheck",
"route53:DeleteHealthCheck",
"route53:ListHealthChecks",
"route53:GetCheckerIpRanges",
"route53:GetHealthCheckStatus",
"route53:GetHealthCheckCount",
"route53:GetHealthCheckLastFailureReason"
],
"Resource": "*"
}
]
}
To create a dns record, you need an IAM policy attached to the IAM user.
Create IAM Policy
{
"Version": "2012-10-17",
"Statement": [
{
"Sid" : "AllowPublicHostedZonePermissions",
"Effect": "Allow",
"Action": [
"route53:CreateHostedZone",
"route53:UpdateHostedZoneComment",
"route53:GetHostedZone",
"route53:ListHostedZones",
"route53:GetHostedZoneCount",
"route53:ListHostedZonesByName"
"route53:DeleteHostedZone",
"route53:ListResourceRecordSets",
"route53:ChangeResourceRecordSets"
],
"Resource": "*"
},
{
"Sid" : "AllowHealthCheckPermissions",
"Effect": "Allow",
"Action": [
"route53:CreateHealthCheck",
"route53:UpdateHealthCheck",
"route53:GetHealthCheck",
"route53:DeleteHealthCheck",
"route53:ListHealthChecks",
"route53:GetCheckerIpRanges",
"route53:GetHealthCheckStatus",
"route53:GetHealthCheckCount",
"route53:GetHealthCheckLastFailureReason"
],
"Resource": "*"
}
]
}
0 coment�rios:
Post a Comment