Letsencrypt in docker container with route53 (aws) "InvalidClientTokenId"

version: '2'
services:
  letsencrypt:
    image: linuxserver/letsencrypt
    container_name: letsencrypt
    ports:
      - 443:443
    volumes:
      - /opt/appdata/letsencrypt/config:/config
    restart:
      always
    environment:
      - PUID=1050
      - PGID=1050
      - EMAIL=mail@domain.com
      - URL=sub.domain.com
      - TZ=Europe/Berlin
      - VALIDATION=dns
      - DNSPLUGIN=manual
...
Please set the DNSPLUGIN variable to a valid plugin name. See docker info for more details.