---
title: "Permissions Required (AWS)"
canonical: "https://docs.infoblox.com/space/UniversalAssetInsights/1501299686/Permissions%20Required%20(AWS)"
format: markdown
---
You must configure certain permissions in AWS IAM Policy before synchronization with Universal DDI. Synchronizing AWS data without configuring these permissions may cause errors.

> ⚠️ Failure to properly configure the credentials with the required additional permissions will hinder the functionality of certain components in the sync process. Incomplete assignment of these necessary permissions may lead to unexpected outcomes.

The following configurations need to be performed depending upon your AWS deployment:

- [Permissions in AWS Route 53 for Bi-directional Synchronization](https://infoblox-docs.atlassian.net/wiki/spaces/BloxOneDDI/pages/1176863337)
- [Permissions in AWS Route 53 for Cloud Forwarding](https://infoblox-docs.atlassian.net/wiki/spaces/BloxOneDDI/pages/1177092707)
- [Permissions in AWS Route 53 for Cloud Forwarder Discovery](https://infoblox-docs.atlassian.net/wiki/spaces/BloxOneDDI/pages/1232897283)
- [Permissions required in AWS Route 53 for Read-only access](https://infoblox-docs.atlassian.net/wiki/spaces/BloxOneDDI/pages/1176961621)
- [AWS Managed Policies for Discovery and Asset Inventory](https://infoblox-docs.atlassian.net/wiki/spaces/BloxOneDDI/pages/1177059956)
- [Discovery Sync Policy file for a single account sync](https://infoblox-docs.atlassian.net/wiki/spaces/BloxOneDDI/pages/1176863384)
- [Discovery Sync Policy file for a multi-account sync](https://infoblox-docs.atlassian.net/wiki/spaces/BloxOneDDI/pages/1475314579)