| route53:AssociateVPCWithHostedZone | Admin |
| route53:ChangeResourceRecordSets | Admin |
| route53:ChangeResourceRecordSets | Admin |
| route53:ChangeTagsForResource | Admin |
| route53:CreateHealthCheck | Admin |
| route53:CreateHostedZone | Admin |
| route53:CreateQueryLoggingConfig | Admin |
| route53:CreateReusableDelegationSet | Admin |
| route53:CreateTrafficPolicy | Admin |
| route53:CreateTrafficPolicyInstance | Admin |
| route53:CreateTrafficPolicyVersion | Admin |
| route53:CreateVPCAssociationAuthorization | Admin |
| route53:DeleteHealthCheck | Admin |
| route53:DeleteHostedZone | Admin |
| route53:DeleteQueryLoggingConfig | Admin |
| route53:DeleteReusableDelegationSet | Admin |
| route53:DeleteTrafficPolicy | Admin |
| route53:DeleteTrafficPolicyInstance | Admin |
| route53:DeleteVPCAssociationAuthorization | Admin |
| route53:DisassociateVPCFromHostedZone | Admin |
| route53:UpdateHealthCheck | Admin |
| route53:UpdateHostedZoneComment | Admin |
| route53:UpdateTrafficPolicyComment | Admin |
| route53:UpdateTrafficPolicyInstance | Admin |
| cloudfront:ListDistributions | Metadata |
| ec2:DescribeRegions | Metadata |
| ec2:DescribeVpcs | Metadata |
| elasticloadbalancing:DescribeLoadBalancers | Metadata |
| route53:GetAccountLimit | Metadata |
| route53:GetChange | Metadata |
| route53:GetChangeDetails | Metadata |
| route53:GetCheckerIpRanges | Metadata |
| route53:GetGeoLocation | Metadata |
| route53:GetHealthCheck | Metadata |
| route53:GetHealthCheckCount | Metadata |
| route53:GetHealthCheckLastFailureReason | Metadata |
| route53:GetHealthCheckStatus | Metadata |
| route53:GetHostedZone | Metadata |
| route53:GetHostedZoneCount | Metadata |
| route53:GetHostedZoneLimit | Metadata |
| route53:GetQueryLoggingConfig | Metadata |
| route53:GetReusableDelegationSet | Metadata |
| route53:GetReusableDelegationSetLimit | Metadata |
| route53:GetTrafficPolicy | Metadata |
| route53:GetTrafficPolicyInstance | Metadata |
| route53:GetTrafficPolicyInstanceCount | Metadata |
| route53:ListChangeBatchesByHostedZone | Metadata |
| route53:ListChangeBatchesByRRSet | Metadata |
| route53:ListGeoLocations | Metadata |
| route53:ListHealthChecks | Metadata |
| route53:ListHostedZones | Metadata |
| route53:ListHostedZonesByName | Metadata |
| route53:ListQueryLoggingConfigs | Metadata |
| route53:ListResourceRecordSets | Metadata |
| route53:ListReusableDelegationSets | Metadata |
| route53:ListTagsForResource | Metadata |
| route53:ListTagsForResources | Metadata |
| route53:ListTrafficPolicies | Metadata |
| route53:ListTrafficPolicyInstances | Metadata |
| route53:ListTrafficPolicyInstancesByHostedZone | Metadata |
| route53:ListTrafficPolicyInstancesByPolicy | Metadata |
| route53:ListTrafficPolicyVersions | Metadata |
| route53:ListVPCAssociationAuthorizations | Metadata |
| route53:TestDNSAnswer | Metadata |
| route53domains:CheckDomainAvailability | Metadata |
| route53domains:CheckDomainTransferability | Metadata |
| s3:ListBucket | Metadata |