Alessandro Ogier updated the Route53 DNS01 ACME policy documentation for the cert-manager/website repository, focusing on security and clarity. He revised the IAM policy guidance to restrict ChangeResourceRecordSets permissions exclusively to TXT records, thereby reducing the permission surface area and aligning with least-privilege principles. This documentation work, written in Markdown, clarified the requirements for DNS-based ACME flows and improved auditability through descriptive commit messaging. Alessandro’s approach demonstrated a solid understanding of AWS IAM policy design and DNS concepts, resulting in more secure and accessible onboarding materials for developers working with cert-manager and Route53 integrations. No bugs were addressed.