update route 53 policy to be even more restricted

README.md

@@ -95,12 +95,20 @@ docker run -d \
         {
             "Effect": "Allow",
             "Action": [
-                "route53:ListHostedZonesByName",
+                "route53:ListHostedZonesByName"
-                "route53:ChangeResourceRecordSets"
             ],
             "Resource": [
                 "*"
             ]
+        },
+        {
+            "Effect": "Allow",
+            "Action": [
+                "route53:ChangeResourceRecordSets"
+            ],
+            "Resource": [
+                "arn:aws:route53:::hostedzone/${HOSTED_ZONE_ID}"
+            ]
         }
     ]
 }