restrict based on record name in dns private

0

Hi, I have read that there are no conditions to use to restrict route53's ChangeResourceRecordSets w.r.t record names, but is there another way to restrict this? Note: instance profile is being used than user

ruakn
質問済み 2年前234ビュー
1回答
0

Hello

I don't think there is the possibility for the IAM permissions for the ChangeResourceRecordSets but you can do in different way

Alternative Solution:

Assume Main Domain www.acme.com

  • Create a new HostedZone for the record you would like to restrict for example restrict.acme.com
  • Create the NS record in **www.acme.com ** Main DNS hosted Zone
NameTypeValue
restrictNSXXXXXXX.awsdnxxxx.com
  • Verify the DNS NS are propagated for the restrict.acme.com

Now its time for the IAM user restrict, You can give access to use to the HostedZone. --> restrict.acme.com

profile picture
エキスパート
GK
回答済み 2年前

ログインしていません。 ログイン 回答を投稿する。

優れた回答とは、質問に明確に答え、建設的なフィードバックを提供し、質問者の専門分野におけるスキルの向上を促すものです。

質問に答えるためのガイドライン

関連するコンテンツ