diff --git a/policies/iam.json b/policies/iam.json
index f6cc7d4..8ad13d4 100644
--- a/policies/iam.json
+++ b/policies/iam.json
@@ -58,7 +58,7 @@
                 "route53:GetHostedZone"
             ],
             "Resource": [
-                "arn:aws:route53:::hostedzone/ZDTFQ26XMAF14"
+                "arn:aws:route53:::hostedzone/*"
             ]
         },
         {
diff --git a/scripts/3_addons.sh b/scripts/3_addons.sh
index e2cc873..93d538a 100644
--- a/scripts/3_addons.sh
+++ b/scripts/3_addons.sh
@@ -85,6 +85,11 @@ EOF
   helm install ./cluster-autoscaler --name autoscaler -f /tmp/autoscaler.yml --namespace kube-system
 }
 
+function setup_external_dns {
+  helm install --name external-dns stable/external-dns --set rbac.create=true --namespace kube-system
+}
+
 install_helm
 setup_helm
 setup_autoscaler
+setup_external_dns