route53resolver:GetResolverEndpoint is a Read access-level action in the route53resolver service. Grants permission to get information about a specified Resolver endpoint, such as whether it's an inbound or an outbound endpoint, and the IP addresses in your VPC that DNS queries are forwarded to on the way into or out of your VPC
ARNs that route53resolver:GetResolverEndpoint can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants route53resolver:GetResolverEndpoint.
Filters access by the presence of tag key-value pairs attached to the resource
A minimal policy that allows route53resolver:GetResolverEndpoint. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowRoute53resolverGetResolverEndpoint",
"Effect": "Allow",
"Action": "route53resolver:GetResolverEndpoint",
"Resource": "*"
}
]
}