| route53resolver:AssociateResolverEndpointIpAddress | Admin |
| route53resolver:AssociateResolverRule | Admin |
| route53resolver:CreateResolverEndpoint | Admin |
| route53resolver:CreateResolverRule | Admin |
| route53resolver:DeleteResolverEndpoint | Admin |
| route53resolver:DeleteResolverRule | Admin |
| route53resolver:DisassociateResolverEndpointIpAddress | Admin |
| route53resolver:DisassociateResolverRule | Admin |
| route53resolver:PutResolverRulePolicy | Admin |
| route53resolver:UpdateResolverEndpoint | Admin |
| route53resolver:UpdateResolverRule | Admin |
| route53resolver:TagResource | Operator |
| route53resolver:UntagResource | Operator |
| ec2:DescribeAvailabilityZones | Metadata |
| ec2:DescribeSecurityGroups | Metadata |
| ec2:DescribeSubnets | Metadata |
| route53resolver:GetResolverEndpoint | Metadata |
| route53resolver:GetResolverRule | Metadata |
| route53resolver:GetResolverRuleAssociation | Metadata |
| route53resolver:GetResolverRulePolicy | Metadata |
| route53resolver:ListResolverEndpointIpAddresses | Metadata |
| route53resolver:ListResolverEndpoints | Metadata |
| route53resolver:ListResolverRuleAssociations | Metadata |
| route53resolver:ListResolverRules | Metadata |
| route53resolver:ListTagsForResource | Metadata |
