1 Answer
- Newest
- Most votes
- Most comments
0
Hello
I don't think there is the possibility for the IAM permissions for the ChangeResourceRecordSets
but you can do in different way
Assume Main Domain www.acme.com
- Create a new HostedZone for the record you would like to restrict for example restrict.acme.com
- Create the NS record in **www.acme.com ** Main DNS hosted Zone
Name | Type | Value |
---|---|---|
restrict | NS | XXXXXXX.awsdnxxxx.com |
- Verify the DNS NS are propagated for the restrict.acme.com
Now its time for the IAM user restrict, You can give access to use to the HostedZone. --> restrict.acme.com
answered 2 years ago
Relevant content
- asked a year ago
- Accepted Answerasked 9 months ago
- asked 2 years ago
- AWS OFFICIALUpdated a year ago
- AWS OFFICIALUpdated a year ago