Assume we're trying to get renewing certificates for my.domain.com
and *.my.domain.com
Create an IAM role with permissions like the following (from https://github.com/libdns/route53):
Replace ZONEIDHEREABCDEFG with the zone ID of the route53 zone associated with my.domain.com
{
"Version": "2012-10-17",
"Statement": [