route53profiles:DisassociateResourceFromProfile is a Write access-level action in the route53profiles service. Grants permission to delete the asoociation between the resource. such as DNS Firewall rule group, private hosted zone, resolver rule, etc. and the specified Profile
This action does not support resource-level permissions; use "Resource": "*" in your policy.
No condition keys are documented for this action.
A minimal policy that allows route53profiles:DisassociateResourceFromProfile. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowRoute53profilesDisassociateResourceFromProfile",
"Effect": "Allow",
"Action": "route53profiles:DisassociateResourceFromProfile",
"Resource": "*"
}
]
}