# Amazon Lightsail


<!-- Code generated by gen-dns-providers; DO NOT EDIT. -->

Configuration for the [Amazon Lightsail](https://aws.amazon.com/lightsail/) DNS provider.

See the [lego documentation](https://go-acme.github.io/lego/dns/lightsail/) for full details.

```yaml
letsEncrypt:
  dnsProvider: "lightsail"
  dnsCredentials:
    # DNS_ZONE: Domain name of the DNS zone
    zone: ""
    # LIGHTSAIL_POLLING_INTERVAL: Time between DNS propagation check in seconds (Default: 2)
    pollingInterval: ""
    # LIGHTSAIL_PROPAGATION_TIMEOUT: Maximum waiting time for DNS propagation in seconds (Default: 120)
    propagationTimeout: ""
```

Credentials are passed directly to lego using strong types and are never written to the process environment.
You may also use the raw lego environment-variable names as keys instead of the normalized names.

Lightsail uses the AWS SDK, which discovers credentials from its own sources:
the `AWS_ACCESS_KEY_ID`/`AWS_SECRET_ACCESS_KEY` environment variables, a shared
credentials file (`AWS_SHARED_CREDENTIALS_FILE`), an assumed role, or an instance
role. These are read directly by the AWS SDK and cannot be set through
`dnsCredentials`.