403 для ChangeResourceRecordSets, несмотря на то, что роль имеет route53Domains:* в политике

Ошибка

User: arn:aws:sts::[redacted]:assumed-role/laravel-vapor-role/vapor-[redacted]-platform-staging-queue is not authorized to perform: route53:ChangeResourceRecordSets on resource: arn:aws:route53:::hostedzone/[redacted]

Моя роль

{
  "permissionsBoundary": {},
  "roleName": "laravel-vapor-role",
  "policies": [
    {
      "document": {
        "Version": "2012-10-17",
        "Statement": [
          {
            "Action": [
              "ec2:CreateNetworkInterface",
              "ec2:DeleteNetworkInterface",
              "ec2:DescribeNetworkInterfaces",
              "logs:CreateLogGroup",
              "logs:CreateLogStream",
              "logs:FilterLogEvents",
              "logs:PutLogEvents",
              "ssm:GetParameters",
              "ssm:GetParameter",
              "lambda:invokeFunction",
              "s3:*",
              "ses:*",
              "sqs:*",
              "dynamodb:*",
              "route53domains:*"
            ],
            "Effect": "Allow",
            "Resource": "*"
          }
        ]
      },
      "name": "laravel-vapor-role-policy",
      "type": "inline"
    }
  ],
  "trustedEntities": [
    "apigateway.amazonaws.com",
    "lambda.amazonaws.com"
  ]
}