AWS Route53 documentation change
Summary
Added permissions for cloudwatch:GetMetricData, tag:GetResources, es:ListDomainNames, es:DescribeDomains, cloudfront:GetDistributionTenantByDomain, cloudfront:GetConnectionGroup, and lightsail:GetContainerServices to the AmazonRoute53FullAccess policy documentation
Security assessment
This change documents IAM policy updates required for accessing monitoring and resource data. While related to security permissions, there is no evidence of addressing a specific vulnerability or incident.
Diff
diff --git a/Route53/latest/DeveloperGuide/History.md b/Route53/latest/DeveloperGuide/History.md index 128274b21..7b9ad8729 100644 --- a//Route53/latest/DeveloperGuide/History.md +++ b//Route53/latest/DeveloperGuide/History.md @@ -47,0 +48,5 @@ The following entries describe important changes in each release of the Route 53 +**June 01, 2025** + + +Added permissions for `cloudwatch:GetMetricData` ,`tag:GetResources`, `es:ListDomainNames`, `es:DescribeDomains`, `cloudfront:GetDistributionTenantByDomain`, `cloudfront:GetConnectionGroup` and `lightsail:GetContainerServices`. These permissions enable you to fetch up to 500 CloudWatch health check metrics, up to 100 names of health checks, get the domain configuration for the specified Amazon OpenSearch Service domains, and list the names of all Amazon OpenSearch Service domains owned by the current user in the active Region, fetch the CloudFront multi-tenant distributions and get the Lightsail container services. For more information, see [AWS managed policy: AmazonRoute53FullAccess](./security-iam-awsmanpol-route53.html#security-iam-awsmanpol-AmazonRoute53FullAccess). + @@ -78 +83 @@ Added Route 53 Resolver DNS Firewall findings to the Security Hub. For more info -Added Route 53 Resolver DNS Firewall Advanced, a new set of features on Route 53 Resolver DNS Firewall that allows identify and block DNS traffic associated with advanced DNS threats, such as DNS tunneling and Domain Generation Algorithm (DGA) based threats. For more information, see [Route 53 Resolver DNS Firewall Advanced](./firewall-advanced.html). +Added Route 53 Resolver DNS Firewall Advanced, a new set of features on Route 53 Resolver DNS Firewall that allows you to identify and block DNS traffic associated with advanced DNS threats, such as DNS tunneling and Domain Generation Algorithm (DGA) based threats. For more information, see [Route 53 Resolver DNS Firewall Advanced](./firewall-advanced.html).