AWS Route53 plugin. Using examples from https://poshac.me/docs/v4/Plugins/Route53/#using-the-plugin.

$r53Secret = Read-Host 'Enter Secret' -AsSecureString
$pArgs = @{R53AccessKey='XXXXXXXXXX'; R53SecretKey=$r53Secret}

New-PACertificate foo.com -Plugin Route53 -PluginArgs $pArgs

SenderSignatureDoesNotMatchThe request signature we calculated does not match the signature you provided. Check your AWS Secret Access Key and signing method. Consult the service documentation for details.6dfdebe0-3193-40a4-83f4-9f238e7259ba

I've tried in PS 5.1 and PS core 7.4. I'm 100% sure the key is right, because it works if I use this method:

Set-AWSCredential -StoreAs 'poshacme' -AccessKey 'xxxxxxxx' -SecretKey 'yyyyyyyy'
$pArgs = @{R53ProfileName='poshacme'}
New-PACertificate example.com -Plugin Route53 -PluginArgs $pArgs