apigateway:UpdateDomainNamePolicy

Permissions management

apigateway:UpdateDomainNamePolicy is a Permissions management access-level action in the apigateway service. Grants permission to update the invoke policy of a custom domain name for private APIs

Resource types

ARNs that apigateway:UpdateDomainNamePolicy can be scoped to in an IAM policy.

arn:${Partition}:apigateway:${Region}::/domainnames
DomainNames
arn:${Partition}:apigateway:${Region}:${Account}:/domainnames/${DomainName}+${DomainIdentifier}
PrivateDomainName

Condition keys

Keys you can use in the Condition block of a policy that grants apigateway:UpdateDomainNamePolicy.

apigateway:Request/EndpointType ArrayOfString

Filters access by endpoint type. Available during the CreateDomainName, UpdateDomainName, CreateRestApi, and UpdateRestApi operations

apigateway:Request/MtlsTrustStoreUri String

Filters access by URI of the truststore used for mutual TLS authentication. Available during the CreateDomainName and UpdateDomainName operations

apigateway:Request/MtlsTrustStoreVersion String

Filters access by version of the truststore used for mutual TLS authentication. Available during the CreateDomainName and UpdateDomainName operations

apigateway:Request/SecurityPolicy ArrayOfString

Filters access by TLS version. Available during the CreateDomain and UpdateDomain operations

apigateway:Resource/EndpointType ArrayOfString

Filters access by endpoint type. Available during the UpdateDomainName, DeleteDomainName, UpdateRestApi, and DeleteRestApi operations

apigateway:Resource/RoutingMode String

Filters access by routing mode of the domain name. Available during the UpdateDomainName and DeleteDomainName operations

aws:ResourceTag/${TagKey} String

Filters access by the tags attached to the resource

Example IAM policy

A minimal policy that allows apigateway:UpdateDomainNamePolicy. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowApigatewayUpdateDomainNamePolicy",
      "Effect": "Allow",
      "Action": "apigateway:UpdateDomainNamePolicy",
      "Resource": "*"
    }
  ]
}

Related actions in apigateway

View all apigateway actions →