2026/11/10 - Route 53 Profiles - 1 new5 updated api methods
Changes Adds support for having multiple profiles on one VPC. This is done using a priority system to handle conflicts on the dataplane.
Updates the name or priority of the specified Route 53 Profile association with a VPC. Route 53 VPC Resolver evaluates the Profile associations for a VPC in priority order, starting with the lowest value. Only the account that created the association can update it.
When you change the priority, the association status is UPDATING until the change propagates, and then COMPLETE. While the status is UPDATING, Route 53 VPC Resolver might still use the previous priority for some queries. When the status is COMPLETE, the new priority applies to all queries from the VPC.
The request fails with a ValidationException if another Profile association for the VPC already uses the priority that you specify, or if the priority is outside the range 100–9900.
You can update an association whose status is CREATING, UPDATING, or COMPLETE. The request fails with a ConflictException if the association status is DELETING, DELETED, or FAILED, or if the account that owns the association is inactive.
See also: AWS API Documentation
Request Syntax
client.update_profile_association(
ProfileAssociationId='string',
Name='string',
Priority=123
)
string
[REQUIRED]
The ID of the Profile association to update.
string
The name of the Profile association.
integer
The new priority of the Profile association. Route 53 VPC Resolver evaluates the Profile associations for a VPC in priority order, starting with the lowest value.
The priority must be unique among the Profile associations for the VPC.
dict
Response Syntax
{
'ProfileAssociation': {
'Id': 'string',
'Name': 'string',
'OwnerId': 'string',
'ProfileId': 'string',
'ResourceId': 'string',
'Status': 'COMPLETE'|'DELETING'|'UPDATING'|'CREATING'|'DELETED'|'FAILED',
'StatusMessage': 'string',
'CreationTime': datetime(2015, 1, 1),
'ModificationTime': datetime(2015, 1, 1),
'Priority': 123
}
}
Response Structure
(dict) --
ProfileAssociation (dict) --
Information about the UpdateProfileAssociation request, including a status message.
Id (string) --
ID of the Profile association.
Name (string) --
Name of the Profile association.
OwnerId (string) --
Amazon Web Services account ID of the Profile association owner.
ProfileId (string) --
ID of the Profile.
ResourceId (string) --
The Amazon Resource Name (ARN) of the VPC.
Status (string) --
Status of the Profile association.
StatusMessage (string) --
Additional information about the Profile association.
CreationTime (datetime) --
The date and time that the Profile association was created, in Unix time format and Coordinated Universal Time (UTC).
ModificationTime (datetime) --
The date and time that the Profile association was modified, in Unix time format and Coordinated Universal Time (UTC).
Priority (integer) --
The priority of the Profile association. Route 53 VPC Resolver evaluates the Profile associations for a VPC in priority order, starting with the lowest value. Associations created without a priority have priority 100.
{'Priority': 'integer'}
Response {'ProfileAssociation': {'Priority': 'integer'}}
Associates a Route 53 Profiles profile with a VPC. A VPC can have up to two Profile associations. A Profile can be associated with up to 1,000 VPCs, and you can request a higher quota for the number of VPCs. For more information, see Quotas on Route 53 Profiles.
Route 53 VPC Resolver evaluates the Profile associations for a VPC in priority order, starting with the lowest Priority value. If the VPC has no other Profile associations, you can omit Priority, and the association gets priority 100. When the VPC already has a Profile association, you must specify a Priority, and each Profile association for the VPC must have a unique priority. To change the priority of an existing association, use UpdateProfileAssociation.
The request fails with a ValidationException in these cases:
You omit Priority, and the VPC already has a Profile association.
Another Profile association for the VPC already uses the priority that you specify.
The priority is outside the range 100–9900.
The Profile is already associated with the VPC, and you specify a different Name or Priority. To change the priority, use UpdateProfileAssociation.
The request fails with a LimitExceededException if the VPC already has the maximum number of Profile associations.
See also: AWS API Documentation
Request Syntax
client.associate_profile(
ProfileId='string',
ResourceId='string',
Name='string',
Tags=[
{
'Key': 'string',
'Value': 'string'
},
],
Priority=123
)
string
[REQUIRED]
ID of the Profile.
string
[REQUIRED]
The ID of the VPC.
string
[REQUIRED]
A name for the association.
list
A list of the tag keys and values that you want to identify the Profile association.
(dict) --
Tag for the Profile.
Key (string) -- [REQUIRED]
Key associated with the Tag.
Value (string) -- [REQUIRED]
Value for the Tag.
integer
The priority of the Profile association. Route 53 VPC Resolver evaluates the Profile associations for a VPC in priority order, starting with the lowest value.
When the VPC already has a Profile association, you must specify a priority that no other Profile association for the VPC uses. If you omit the priority for the first association with a VPC, the association gets priority 100.
dict
Response Syntax
{
'ProfileAssociation': {
'Id': 'string',
'Name': 'string',
'OwnerId': 'string',
'ProfileId': 'string',
'ResourceId': 'string',
'Status': 'COMPLETE'|'DELETING'|'UPDATING'|'CREATING'|'DELETED'|'FAILED',
'StatusMessage': 'string',
'CreationTime': datetime(2015, 1, 1),
'ModificationTime': datetime(2015, 1, 1),
'Priority': 123
}
}
Response Structure
(dict) --
ProfileAssociation (dict) --
The association that you just created. The association has an ID that you can use to identify it in other requests, such as update and delete.
Id (string) --
ID of the Profile association.
Name (string) --
Name of the Profile association.
OwnerId (string) --
Amazon Web Services account ID of the Profile association owner.
ProfileId (string) --
ID of the Profile.
ResourceId (string) --
The Amazon Resource Name (ARN) of the VPC.
Status (string) --
Status of the Profile association.
StatusMessage (string) --
Additional information about the Profile association.
CreationTime (datetime) --
The date and time that the Profile association was created, in Unix time format and Coordinated Universal Time (UTC).
ModificationTime (datetime) --
The date and time that the Profile association was modified, in Unix time format and Coordinated Universal Time (UTC).
Priority (integer) --
The priority of the Profile association. Route 53 VPC Resolver evaluates the Profile associations for a VPC in priority order, starting with the lowest value. Associations created without a priority have priority 100.
{'ProfileAssociation': {'Priority': 'integer'}}
Dissociates a specified Route 53 Profile from the specified VPC.
See also: AWS API Documentation
Request Syntax
client.disassociate_profile(
ProfileId='string',
ResourceId='string'
)
string
[REQUIRED]
ID of the Profile.
string
[REQUIRED]
The ID of the VPC.
dict
Response Syntax
{
'ProfileAssociation': {
'Id': 'string',
'Name': 'string',
'OwnerId': 'string',
'ProfileId': 'string',
'ResourceId': 'string',
'Status': 'COMPLETE'|'DELETING'|'UPDATING'|'CREATING'|'DELETED'|'FAILED',
'StatusMessage': 'string',
'CreationTime': datetime(2015, 1, 1),
'ModificationTime': datetime(2015, 1, 1),
'Priority': 123
}
}
Response Structure
(dict) --
ProfileAssociation (dict) --
Information about the DisassociateProfile request.
Id (string) --
ID of the Profile association.
Name (string) --
Name of the Profile association.
OwnerId (string) --
Amazon Web Services account ID of the Profile association owner.
ProfileId (string) --
ID of the Profile.
ResourceId (string) --
The Amazon Resource Name (ARN) of the VPC.
Status (string) --
Status of the Profile association.
StatusMessage (string) --
Additional information about the Profile association.
CreationTime (datetime) --
The date and time that the Profile association was created, in Unix time format and Coordinated Universal Time (UTC).
ModificationTime (datetime) --
The date and time that the Profile association was modified, in Unix time format and Coordinated Universal Time (UTC).
Priority (integer) --
The priority of the Profile association. Route 53 VPC Resolver evaluates the Profile associations for a VPC in priority order, starting with the lowest value. Associations created without a priority have priority 100.
{'ProfileAssociation': {'Priority': 'integer'}}
Retrieves a Route 53 Profile association for a VPC. A VPC can have up to two Profile associations, and a Profile can be associated with up to 1,000 VPCs.
See also: AWS API Documentation
Request Syntax
client.get_profile_association(
ProfileAssociationId='string'
)
string
[REQUIRED]
The identifier of the association you want to get information about.
dict
Response Syntax
{
'ProfileAssociation': {
'Id': 'string',
'Name': 'string',
'OwnerId': 'string',
'ProfileId': 'string',
'ResourceId': 'string',
'Status': 'COMPLETE'|'DELETING'|'UPDATING'|'CREATING'|'DELETED'|'FAILED',
'StatusMessage': 'string',
'CreationTime': datetime(2015, 1, 1),
'ModificationTime': datetime(2015, 1, 1),
'Priority': 123
}
}
Response Structure
(dict) --
ProfileAssociation (dict) --
Information about the Profile association that you specified in a GetProfileAssociation request.
Id (string) --
ID of the Profile association.
Name (string) --
Name of the Profile association.
OwnerId (string) --
Amazon Web Services account ID of the Profile association owner.
ProfileId (string) --
ID of the Profile.
ResourceId (string) --
The Amazon Resource Name (ARN) of the VPC.
Status (string) --
Status of the Profile association.
StatusMessage (string) --
Additional information about the Profile association.
CreationTime (datetime) --
The date and time that the Profile association was created, in Unix time format and Coordinated Universal Time (UTC).
ModificationTime (datetime) --
The date and time that the Profile association was modified, in Unix time format and Coordinated Universal Time (UTC).
Priority (integer) --
The priority of the Profile association. Route 53 VPC Resolver evaluates the Profile associations for a VPC in priority order, starting with the lowest value. Associations created without a priority have priority 100.
{'ProfileAssociations': {'Priority': 'integer'}}
Lists all the VPCs that the specified Route 53 Profile is associated with.
See also: AWS API Documentation
Request Syntax
client.list_profile_associations(
ResourceId='string',
ProfileId='string',
MaxResults=123,
NextToken='string'
)
string
ID of the VPC.
string
ID of the Profile.
integer
The maximum number of objects that you want to return for this request. If more objects are available, in the response, a NextToken value, which you can use in a subsequent call to get the next batch of objects, is provided.
If you don't specify a value for MaxResults, up to 100 objects are returned.
string
For the first call to this list request, omit this value.
When you request a list of objects, at most the number of objects specified by MaxResults is returned. If more objects are available for retrieval, a NextToken value is returned in the response. To retrieve the next batch of objects, use the token that was returned for the prior request in your next request.
dict
Response Syntax
{
'ProfileAssociations': [
{
'Id': 'string',
'Name': 'string',
'OwnerId': 'string',
'ProfileId': 'string',
'ResourceId': 'string',
'Status': 'COMPLETE'|'DELETING'|'UPDATING'|'CREATING'|'DELETED'|'FAILED',
'StatusMessage': 'string',
'CreationTime': datetime(2015, 1, 1),
'ModificationTime': datetime(2015, 1, 1),
'Priority': 123
},
],
'NextToken': 'string'
}
Response Structure
(dict) --
ProfileAssociations (list) --
A complex type that containts settings information about the profile's VPC associations.
(dict) --
An association between a Route 53 Profile and a VPC.
Id (string) --
ID of the Profile association.
Name (string) --
Name of the Profile association.
OwnerId (string) --
Amazon Web Services account ID of the Profile association owner.
ProfileId (string) --
ID of the Profile.
ResourceId (string) --
The Amazon Resource Name (ARN) of the VPC.
Status (string) --
Status of the Profile association.
StatusMessage (string) --
Additional information about the Profile association.
CreationTime (datetime) --
The date and time that the Profile association was created, in Unix time format and Coordinated Universal Time (UTC).
ModificationTime (datetime) --
The date and time that the Profile association was modified, in Unix time format and Coordinated Universal Time (UTC).
Priority (integer) --
The priority of the Profile association. Route 53 VPC Resolver evaluates the Profile associations for a VPC in priority order, starting with the lowest value. Associations created without a priority have priority 100.
NextToken (string) --
If more than MaxResults profile associations match the specified criteria, you can submit another ListProfileAssociations request to get the next group of results. In the next request, specify the value of NextToken from the previous response.
{'ResourceArn': 'string'}
Lists all the resource associations for the specified Route 53 Profile.
See also: AWS API Documentation
Request Syntax
client.list_profile_resource_associations(
ProfileId='string',
ResourceType='string',
ResourceArn='string',
MaxResults=123,
NextToken='string'
)
string
[REQUIRED]
The ID of the Profile.
string
ID of a resource if you want information on only one type.
string
The Amazon Resource Name (ARN) of a resource. If you specify this parameter, only the association with that resource is returned.
integer
The maximum number of objects that you want to return for this request. If more objects are available, in the response, a NextToken value, which you can use in a subsequent call to get the next batch of objects, is provided.
If you don't specify a value for MaxResults, up to 100 objects are returned.
string
For the first call to this list request, omit this value.
When you request a list of objects, at most the number of objects specified by MaxResults is returned. If more objects are available for retrieval, a NextToken value is returned in the response. To retrieve the next batch of objects, use the token that was returned for the prior request in your next request.
dict
Response Syntax
{
'ProfileResourceAssociations': [
{
'Id': 'string',
'Name': 'string',
'OwnerId': 'string',
'ProfileId': 'string',
'ResourceArn': 'string',
'ResourceType': 'string',
'ResourceProperties': 'string',
'Status': 'COMPLETE'|'DELETING'|'UPDATING'|'CREATING'|'DELETED'|'FAILED',
'StatusMessage': 'string',
'CreationTime': datetime(2015, 1, 1),
'ModificationTime': datetime(2015, 1, 1)
},
],
'NextToken': 'string'
}
Response Structure
(dict) --
ProfileResourceAssociations (list) --
Information about the profile resource association that you specified in a GetProfileResourceAssociation request.
(dict) --
The association between a Route 53 Profile and resources.
Id (string) --
ID of the Profile resource association.
Name (string) --
Name of the Profile resource association.
OwnerId (string) --
Amazon Web Services account ID of the Profile resource association owner.
ProfileId (string) --
Profile ID of the Profile that the resources are associated with.
ResourceArn (string) --
The Amazon Resource Name (ARN) of the resource association.
ResourceType (string) --
Resource type, such as a private hosted zone, interface VPC endpoint, Resolver query log configuration, or DNS Firewall rule group.
ResourceProperties (string) --
If the DNS resource is a DNS Firewall rule group, this indicates the priority.
Status (string) --
Status of the Profile resource association.
StatusMessage (string) --
Additional information about the Profile resource association.
CreationTime (datetime) --
The date and time that the Profile resource association was created, in Unix time format and Coordinated Universal Time (UTC).
ModificationTime (datetime) --
The date and time that the Profile resource association was modified, in Unix time format and Coordinated Universal Time (UTC).
NextToken (string) --
If more than MaxResults resource associations match the specified criteria, you can submit another ListProfileResourceAssociations request to get the next group of results. In the next request, specify the value of NextToken from the previous response.