route53profiles:UpdateProfileResourceAssociation is a Write access-level action in the route53profiles service. Grants permission to update the Profile resource association name or the resource properties or both, if both name and resource properties are null, the api returns the existing Profile resource association
This action does not support resource-level permissions; use "Resource": "*" in your policy.
Keys you can use in the Condition block of a policy that grants route53profiles:UpdateProfileResourceAssociation.
Filters access by priority range of a Firewall Rule Group
Filters access by Hosted Zone domains
Filters access by Resolver Rule domains
Filters access by specific resource type. Possible options include 'HostedZone', 'FirewallRuleGroup', 'ResolverQueryLoggingConfig', 'ResolverRule', and 'VpcEndpoint'
A minimal policy that allows route53profiles:UpdateProfileResourceAssociation. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowRoute53profilesUpdateProfileResourceAssociation",
"Effect": "Allow",
"Action": "route53profiles:UpdateProfileResourceAssociation",
"Resource": "*"
}
]
}