asynchrony/docker-letsencrypt repository overview

docker run -e "S3_BUCKET=X" -e "ROUTE53_HOSTED_ZONE_ID=Y" -e "LETS_ENCRYPT_CA=https://acme-v01.apletsencrypt.org/directory" asynchrony/docker-letsencrypt

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Action": [
                "s3:GetObject",
                "s3:PutObject",
                "s3:DeleteObject"
            ],
            "Resource": "arn:aws:s3:::S3_BUCKET/*",
            "Effect": "Allow"
        },
        {
            "Action": [
                "s3:ListBucket"
            ],
            "Resource": "arn:aws:s3:::S3_BUCKET",
            "Effect": "Allow"
        },
        {
            "Action": [
                "route53:ChangeResourceRecordSets"
            ],
            "Resource": "arn:aws:route53:::hostedzone/ROUTE53_HOSTED_ZONE_ID",
            "Effect": "Allow"
        }
    ]
}