An IAM policy for Amazon AWS to allow limited access to Route 53

route53-user-policy.json

{
   "Statement":[
      {
         "Action":[
            "route53:ChangeResourceRecordSets",
            "route53:GetHostedZone",
            "route53:ListResourceRecordSets"
         ],
         "Effect":"Allow",
         "Resource":[
            "arn:aws:route53:::hostedzone/<Your zone ID>"
         ]
      },
      {
         "Action":[
            "route53:ListHostedZones"
         ],
         "Effect":"Allow",
         "Resource":[
            "*"
         ]
      }
   ]
}

"route53:GetChange" action must be allowed for "--wait" parameter to work

Many thanks for your script!

Need to add the following line after the opening brace:

      "Version": "2012-10-17",

Thanks! this is the only example I've been able to find of what the Resource ARN is supposed to look like.