.
(⎈|masterseo0:my-webs) [root@kops-ec2 ~]# ls externaldns-aws-r53-policy.json
externaldns-aws-r53-policy.json

(⎈|masterseo0:my-webs) [root@kops-ec2 ~]# more externaldns-aws-r53-policy.json
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "route53:ChangeResourceRecordSets"
      ],
      "Resource": [
        "arn:aws:route53:::hostedzone/*"
      ]
    },
    {
      "Effect": "Allow",
      "Action": [
        "route53:ListHostedZones",
        "route53:ListResourceRecordSets"
      ],
      "Resource": [
        "*"
      ]
    }
  ]
}