github-repos/acme.sh
1
0
Fork 0
mirror of https://github.com/acmesh-official/acme.sh.git synced 2025-03-23 18:30:09 +08:00
Code Issues Packages Projects Releases Wiki Activity

add a more restrictive policy

Fernando Miguel 2017-05-22 14:09:10 +01:00
parent f244f0a71d
commit b8cdbb4b54
1 changed files with 26 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
How-to-use-Amazon-Route53-API.md

@ -34,6 +34,30 @@ You can now use the new API keys with acme.sh
[https://github.com/Neilpang/acme.sh/tree/master/dnsapi#10-use-amazon-route53-domain-api](https://github.com/Neilpang/acme.sh/tree/master/dnsapi#10-use-amazon-route53-domain-api)
### appendix
If you want to use a must more restrictive AWS policy, use the following:
- http://docs.aws.amazon.com/Route53/latest/DeveloperGuide/access-control-managing-permissions.html
```json
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"route53:ListHostedZones"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"route53:GetHostedZone"
"route53:ListResourceRecordSets"
"route53:ChangeResourceRecordSets"
],
"Resource": "arn:aws:route53:::hostedzone/hosted zone id"
}
]
}
```