diff --git a/charts/ace/templates/dns/dns-cred.yaml b/charts/ace/templates/dns/dns-cred.yaml
index 67f7c98db..99dc1fa75 100644
--- a/charts/ace/templates/dns/dns-cred.yaml
+++ b/charts/ace/templates/dns/dns-cred.yaml
@@ -15,6 +15,11 @@ stringData:
   AWS_ACCESS_KEY_ID: '{{ .Values.global.infra.dns.auth.route53.AWS_ACCESS_KEY_ID }}'
   AWS_SECRET_ACCESS_KEY: '{{ .Values.global.infra.dns.auth.route53.AWS_SECRET_ACCESS_KEY }}'
   AWS_REGION: '{{ .Values.global.infra.dns.auth.route53.AWS_REGION }}'
+  # https://github.com/kubeops/external-dns-operator/blob/master/examples/aws-credential.md
+  AWS_CREDENTIAL_FILE: |
+    [default]
+    aws_access_key_id = {{ .Values.global.infra.dns.auth.route53.AWS_ACCESS_KEY_ID }}
+    aws_secret_access_key = {{ .Values.global.infra.dns.auth.route53.AWS_SECRET_ACCESS_KEY }}
 {{- end }}
 {{- if eq .Values.global.infra.dns.provider "cloudDNS" }}
   GOOGLE_SERVICE_ACCOUNT_JSON_KEY: '{{ .Values.global.infra.dns.auth.cloudDNS.GOOGLE_SERVICE_ACCOUNT_JSON_KEY }}'