diff --git a/README.md b/README.md
index 40821df..84ea717 100644
--- a/README.md
+++ b/README.md
@@ -95,12 +95,20 @@ docker run -d \
         {
             "Effect": "Allow",
             "Action": [
-                "route53:ListHostedZonesByName",
-                "route53:ChangeResourceRecordSets"
+                "route53:ListHostedZonesByName"
             ],
             "Resource": [
                 "*"
             ]
+        },
+        {
+            "Effect": "Allow",
+            "Action": [
+                "route53:ChangeResourceRecordSets"
+            ],
+            "Resource": [
+                "arn:aws:route53:::hostedzone/${HOSTED_ZONE_ID}"
+            ]
         }
     ]
 }