3 ms·
I do the challenge verification using DNS and Route 53, and the process has permission to update the challenge record and nothing else. So what you are describi
by adambatkin 5y ago
I do the challenge verification using DNS and Route 53, and the process has permission to update the challenge record and nothing else. So what you are describing is definitely possible.
- akerl_ 5y agoI looked into this previously and was unhappy to learn that Route53 doesn’t allow permissions based on specific records. The most granular permissions were for a full zone at the time.