Update awsroute53.md

[VA6DAH]

Hi Christopher,

I wanted to share the IAM policy I currently use in production. The main change, and you'll see once reading the JSON is that my policy uses new (~2022) fine-grained controls within Route 53 to limit the record type to TXT and only when the domain name contains at least _acme-challenge.

In theory, this limits the security implications if a bad actor got the access key.

More technical details can be found in Amazon Documentation: https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/specifying-conditions-route53.html

[webprofusion-chrisc]

Hi @VA6DAH thanks, this is a great suggestion, could you split the doc out into a basic policy example (the original) and a fine grain example? Other than that it looks great!

[VA6DAH]

Will do, give me some time but I'll update the request soon.

• Dakota