AWS CDK make Route53 records in another account


I am working with 2 AWS accounts, one is the root account which contains the primary Route53 hosted zone The other account is the production account, and it runs our production environment, which is deployed using CDK. It contains a delegated hosted zone with the domain There is also an amplify application running on the production account available at

The goal is to make the production application available via as it is more user-friendly. However, I have been unable to find a method that will allow me to create records in the root account hosted zone from the production account. Is there any method to do this automatically?

I am aware that I can manually enter the records in the root account, but I would rather have an automated solution, as this would reduce the chance of errors and make the entire infrastructure clear to other maintainers.

I have already tried to make a delegated hosted zone with the domain name in the production account, but that does not work.

1 Antwort

What type of principal was used to create the zone(s)? Depending on whether you used the root account credentials or an IAM user/role, the behavior/ownership is slightly different. Have you created the appropriate roles in each account to be used for resource creation? The documentation on resource permissions and using IAM roles is a good place to start.

Route53 only supports identity-based IAM policies, so you'll need to create the appropriate permissions policy and attach it to the principal(s) you're using. There's an example there specifically for delegating CreateHostedZone that is likely a good start.

profile pictureAWS
beantwortet vor 2 Jahren
  • I found a solution. The delegated zone creation was already working, so I just created a dedicated hosted zone for the This has the added benefit of allowing amplify to create certificates. Hosted zones aren't free, but given that this is only a single subdomain, the costs are insignificant.

Du bist nicht angemeldet. Anmelden um eine Antwort zu veröffentlichen.

Eine gute Antwort beantwortet die Frage klar, gibt konstruktives Feedback und fördert die berufliche Weiterentwicklung des Fragenstellers.

Richtlinien für die Beantwortung von Fragen