Are you sure your DNS provider is Lightsail rather than Route53?
I suppose I could look but you should know 
It looks like the credentials for each are specified slightly different in lego config
4 Likes