Mike Lim

Set granular permissions to TXT DNS records with names starting with `_acme-challenge.` only This replaces original policy that is too permissive The `Condition` clause uses [Route 53 resource record set...

[route53 plugin] Improved sample IAM policy

5

Route 53 now support [DNS resource record set permissions](https://aws.amazon.com/about-aws/whats-new/2022/09/amazon-route-53-support-dns-resource-record-set-permissions/). So we can reduce the IAM policy permission scope to only TXT records with the [Condition](https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/specifying-rrset-conditions.html#route53_rrset_ConditionKeys) entry as below ``` {...