route53profiles:DisassociateResourceFromProfile is a Write access-level action in the route53profiles service. Grants permission to delete the asoociation between the resource. such as DNS Firewall rule group, private hosted zone, resolver rule, etc. and the specified Profile
This action does not support resource-level permissions; use "Resource": "*" in your policy.
Keys you can use in the Condition block of a policy that grants route53profiles:DisassociateResourceFromProfile.
Filters access by priority range of a Firewall Rule Group
Filters access by Hosted Zone domains
Filters access by Resolver Rule domains
Filters access by specific resource ARNs
Filters access by specific resource type. Possible options include 'HostedZone', 'FirewallRuleGroup', 'ResolverQueryLoggingConfig', 'ResolverRule', and 'VpcEndpoint'
A minimal policy that allows route53profiles:DisassociateResourceFromProfile. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowRoute53profilesDisassociateResourceFromProfile",
"Effect": "Allow",
"Action": "route53profiles:DisassociateResourceFromProfile",
"Resource": "*"
}
]
}