diff --git a/dns.yml b/dns.yml
index 9f3e061..8f3b9d2 100644
--- a/dns.yml
+++ b/dns.yml
@@ -3,6 +3,12 @@
 - name: Add A Records for thesatelliteoflove.com and nerder.land
   hosts: localhost
   gather_facts: false
+
+  # Scoped IAM user (Route53 only) so this doesn't depend on an `aws login` session
+  module_defaults:
+    amazon.aws.route53:
+      access_key: "{{ vault_aws_dns.access_key }}"
+      secret_key: "{{ vault_aws_dns.secret_key }}"
   
   vars:
     # Domains to manage DNS records for
@@ -47,6 +53,8 @@
             ip: "{{ network.netcup_ip }}"
           - name: gokapi
             ip: "{{ network.netcup_ip }}"
+          - name: id
+            ip: "{{ network.netcup_ip }}"
       - name: nerder.land
         dns_records:
           - name: "forms"