Route 53

Create verification records in Route 53 DNS

Plugin type DNS validation
Download Version 2.3.0.1826. Look for older releases on GitHub for files named like plugin.validation.dns.route53.v2.x.x.zip
Compatibility All platforms

Description

Create the record in Amazon AWS Route53. This requires either a user or an IAM role with the following permissions on the zone: route53:GetChange, route53:ListHostedZones and route53:ChangeResourceRecordSets.

IAM

The IAM role method can only work from inside an EC2 instance. Note that the program expects to recieve an IAM role name, so not the ARN.

The plugin need to be unpacked into the folder where you also unpacked wacs.exe to able to use it. Depending on how you downloaded the file, you may have to unblock all new .dll files before your computer will trust them. You can do that from the Windows File Explorer by using the right mouse button and then checking the `Unblock` box on the General tab.

If you are using simple-acme as a dotnet tool, the folder will be %userprofile%\.dotnet\tools\.store\simple-acme\2.3.0.1826\simple-acme\2.3.0.1826\tools\net8.0\any

To verify that the plugin is properly installed you can start the main executable with ‑‑verbose and it will print information about found and loaded plugins at start up. When the plugin is loaded, it manifests itself as extra menu choices and command line parameters being made availalbe.

This plugin requires to you use the pluggable release of the main executable. It will not work on the smaller trimmed releases.

Command line

--validation route53 Activates the plugin
‑‑route53iamrole AWS IAM role for the current EC2 instance to login into Amazon Route 53. Note that you should provide the IAM name instead of the ARN.
‑‑route53accesskeyid Access key ID to login into Amazon Route 53.
‑‑route53secretaccesskey Secret access key to login into Amazon Route 53.

You may pass the secret in plain text, but can also use a reference to the secret vault like "vault://json/mysecret".

Examples

User --validation route53 ‑‑route53accesskeyid mykeyid ‑‑route53secretaccesskey *****
IAM role --validation route53 ‑‑route53iamrole myrole

JSON

ID 4e5dc595-45c7-4461-929a-8f96a0c96b3d

Looking for win-acme?

simple-acme is a backwards compatible, drop-in replacement built by the same person. Project history.