diff --git a/docs/api-types/issuer/spec.md b/docs/api-types/issuer/spec.md index 7b6e76860..aca8c6fb7 100644 --- a/docs/api-types/issuer/spec.md +++ b/docs/api-types/issuer/spec.md @@ -126,7 +126,6 @@ clouddns: ```yaml route53: accessKeyID: AKIAIOSFODNN7EXAMPLE - hostedZoneID: DIKER8JPL21PSA region: eu-west-1 secretAccessKeySecretRef: name: prod-route53-credentials-secret @@ -158,7 +157,7 @@ Cert-manager requires the following IAM policy. } ``` -The `route53:ListHostedZonesByName` statement can be removed if you specify the hosted zone ID (`spec.acme.dns01.providers[].hostedZoneID`) on the Issuer resource. You can further tighten this policy by limiting the hosted zone that cert-manager has access to (replace `arn:aws:route53:::hostedzone/*` with `arn:aws:route53:::hostedzone/DIKER8JPL21PSA`, for instance). +The `route53:ListHostedZonesByName` statement can be removed if you specify the optional hosted zone ID (`spec.acme.dns01.providers[].hostedZoneID`) on the Issuer resource. You can further tighten this policy by limiting the hosted zone that cert-manager has access to (replace `arn:aws:route53:::hostedzone/*` with `arn:aws:route53:::hostedzone/DIKER8JPL21PSA`, for instance). ##### Cloudflare