Amazon Route 53 Resolver Agentic Access
Amazon Route 53 Resolver exposes 63 API operations that an AI agent could call, of which 63 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.
By consequence: 63 write.
Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.
By consequence
Source
Agentic Access
generated: '2026-07-15'
method: generated
source: openapi/amazon-route53-resolver-openapi.yml
description: Recommended x-agentic-access execution contracts, classified heuristically from
the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
audience per deployment. See research/curity/agentic-governance/.
summary:
operations: 63
by_action_class:
acting: 63
by_consequence:
write: 63
human_in_the_loop_required: 0
operations:
- path: /#X-Amz-Target=Route53Resolver.AssociateFirewallRuleGroup
method: post
operationId: AssociateFirewallRuleGroup
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.AssociateResolverEndpointIpAddress
method: post
operationId: AssociateResolverEndpointIpAddress
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.AssociateResolverQueryLogConfig
method: post
operationId: AssociateResolverQueryLogConfig
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.AssociateResolverRule
method: post
operationId: AssociateResolverRule
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.CreateFirewallDomainList
method: post
operationId: CreateFirewallDomainList
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.CreateFirewallRule
method: post
operationId: CreateFirewallRule
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.CreateFirewallRuleGroup
method: post
operationId: CreateFirewallRuleGroup
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.CreateResolverEndpoint
method: post
operationId: CreateResolverEndpoint
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.CreateResolverQueryLogConfig
method: post
operationId: CreateResolverQueryLogConfig
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.CreateResolverRule
method: post
operationId: CreateResolverRule
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.DeleteFirewallDomainList
method: post
operationId: DeleteFirewallDomainList
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.DeleteFirewallRule
method: post
operationId: DeleteFirewallRule
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.DeleteFirewallRuleGroup
method: post
operationId: DeleteFirewallRuleGroup
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.DeleteResolverEndpoint
method: post
operationId: DeleteResolverEndpoint
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.DeleteResolverQueryLogConfig
method: post
operationId: DeleteResolverQueryLogConfig
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.DeleteResolverRule
method: post
operationId: DeleteResolverRule
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.DisassociateFirewallRuleGroup
method: post
operationId: DisassociateFirewallRuleGroup
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.DisassociateResolverEndpointIpAddress
method: post
operationId: DisassociateResolverEndpointIpAddress
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.DisassociateResolverQueryLogConfig
method: post
operationId: DisassociateResolverQueryLogConfig
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.DisassociateResolverRule
method: post
operationId: DisassociateResolverRule
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.GetFirewallConfig
method: post
operationId: GetFirewallConfig
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.GetFirewallDomainList
method: post
operationId: GetFirewallDomainList
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.GetFirewallRuleGroup
method: post
operationId: GetFirewallRuleGroup
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.GetFirewallRuleGroupAssociation
method: post
operationId: GetFirewallRuleGroupAssociation
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.GetFirewallRuleGroupPolicy
method: post
operationId: GetFirewallRuleGroupPolicy
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.GetResolverConfig
method: post
operationId: GetResolverConfig
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.GetResolverDnssecConfig
method: post
operationId: GetResolverDnssecConfig
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.GetResolverEndpoint
method: post
operationId: GetResolverEndpoint
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.GetResolverQueryLogConfig
method: post
operationId: GetResolverQueryLogConfig
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.GetResolverQueryLogConfigAssociation
method: post
operationId: GetResolverQueryLogConfigAssociation
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.GetResolverQueryLogConfigPolicy
method: post
operationId: GetResolverQueryLogConfigPolicy
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.GetResolverRule
method: post
operationId: GetResolverRule
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.GetResolverRuleAssociation
method: post
operationId: GetResolverRuleAssociation
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.GetResolverRulePolicy
method: post
operationId: GetResolverRulePolicy
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.ImportFirewallDomains
method: post
operationId: ImportFirewallDomains
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.ListFirewallConfigs
method: post
operationId: ListFirewallConfigs
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.ListFirewallDomainLists
method: post
operationId: ListFirewallDomainLists
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.ListFirewallDomains
method: post
operationId: ListFirewallDomains
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.ListFirewallRuleGroupAssociations
method: post
operationId: ListFirewallRuleGroupAssociations
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.ListFirewallRuleGroups
method: post
operationId: ListFirewallRuleGroups
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.ListFirewallRules
method: post
operationId: ListFirewallRules
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.ListResolverConfigs
method: post
operationId: ListResolverConfigs
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.ListResolverDnssecConfigs
method: post
operationId: ListResolverDnssecConfigs
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.ListResolverEndpointIpAddresses
method: post
operationId: ListResolverEndpointIpAddresses
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.ListResolverEndpoints
method: post
operationId: ListResolverEndpoints
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.ListResolverQueryLogConfigAssociations
method: post
operationId: ListResolverQueryLogConfigAssociations
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.ListResolverQueryLogConfigs
method: post
operationId: ListResolverQueryLogConfigs
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.ListResolverRuleAssociations
method: post
operationId: ListResolverRuleAssociations
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.ListResolverRules
method: post
operationId: ListResolverRules
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.ListTagsForResource
method: post
operationId: ListTagsForResource
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.PutFirewallRuleGroupPolicy
method: post
operationId: PutFirewallRuleGroupPolicy
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.PutResolverQueryLogConfigPolicy
method: post
operationId: PutResolverQueryLogConfigPolicy
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.PutResolverRulePolicy
method: post
operationId: PutResolverRulePolicy
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.TagResource
method: post
operationId: TagResource
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.UntagResource
method: post
operationId: UntagResource
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.UpdateFirewallConfig
method: post
operationId: UpdateFirewallConfig
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.UpdateFirewallDomains
method: post
operationId: UpdateFirewallDomains
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.UpdateFirewallRule
method: post
operationId: UpdateFirewallRule
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.UpdateFirewallRuleGroupAssociation
method: post
operationId: UpdateFirewallRuleGroupAssociation
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.UpdateResolverConfig
method: post
operationId: UpdateResolverConfig
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.UpdateResolverDnssecConfig
method: post
operationId: UpdateResolverDnssecConfig
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.UpdateResolverEndpoint
method: post
operationId: UpdateResolverEndpoint
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /#X-Amz-Target=Route53Resolver.UpdateResolverRule
method: post
operationId: UpdateResolverRule
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
Work with this as data
Every access contract here is available over the APIs.io API and to AI agents over MCP. Agentic Access is not yet its own endpoint on the v1 API. Reach it through catalog search and the tag graph, or the MCP server.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for agentic access
3 MCP tools reach this
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
curl "https://apis.io/api/v1/search?q=amazon-route53-resolver-agentic-access&limit=10"
curl "https://apis.io/api/v1/tags/amazon-route53-resolver-agentic-access"
Discovery needs no key. Ratings and market analysis are Pro.