route53profiles:AssociateResourceToProfile is a Write access-level action in the route53profiles service. Grants permission to associates a resource, such as DNS Firewall rule group, private hosted zone, resolver rule, etc. to a specified Profile
This action does not support resource-level permissions; use "Resource": "*" in your policy.
Keys you can use in the Condition block of a policy that grants route53profiles:AssociateResourceToProfile.
Filters access by priority range of a Firewall Rule Group
Filters access by Hosted Zone domains
Filters access by Resolver Rule domains
Filters access by specific resource ARNs
Filters access by specific resource type. Possible options include 'HostedZone', 'FirewallRuleGroup', 'ResolverQueryLoggingConfig', 'ResolverRule', and 'VpcEndpoint'
A minimal policy that allows route53profiles:AssociateResourceToProfile. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowRoute53profilesAssociateResourceToProfile",
"Effect": "Allow",
"Action": "route53profiles:AssociateResourceToProfile",
"Resource": "*"
}
]
}