diff --git a/CHANGES b/CHANGES
index f841496ca..f318bcfb6 100644
--- a/CHANGES
+++ b/CHANGES
@@ -2798,4 +2798,5 @@
 [8.0.1]
 * nfs: disable rpcbind service. we only support nfsv4 mounting
 * dashboard: only show postinstall if notes are not just empty
+* ami: disable route53
 
diff --git a/dashboard/src/js/setup.js b/dashboard/src/js/setup.js
index 24a5abab3..4a5c4712b 100644
--- a/dashboard/src/js/setup.js
+++ b/dashboard/src/js/setup.js
@@ -304,7 +304,8 @@ app.controller('SetupDNSController', ['$scope', '$http', '$timeout', 'Client', f
             } else if (status.provider === 'gce') {
                 $scope.dnsCredentials.provider = 'gcdns';
             } else if (status.provider === 'ami') {
-                $scope.dnsCredentials.provider = 'route53';
+                // aws marketplace made a policy change that they one cannot provide route53 IAM credentials
+                $scope.dnsCredentials.provider = 'wildcard';
             }
 
             $scope.instanceId = search.instanceId;
diff --git a/dashboard/src/setup.html b/dashboard/src/setup.html
index 49dac29df..529330a0e 100644
--- a/dashboard/src/setup.html
+++ b/dashboard/src/setup.html
@@ -108,11 +108,16 @@
                 </div>
 
                 <!-- Route53 -->
-                <div class="form-group" ng-class="{ 'has-error': dnsCredentialsForm.accessKeyId.$dirty && dnsCredentialsForm.accessKeyId.$invalid }" ng-show="dnsCredentials.provider === 'route53'">
+                <div ng-if="provider === 'ami'" ng-show="dnsCredentials.provider === 'route53'">
+                  <b class="has-error">This feature is disabled in AWS Marketplace AMI. <a href="https://docs.aws.amazon.com/marketplace/latest/userguide/product-and-ami-policies.html" target="_blank">AWS Marketplace Policy</a> disallows
+                  AMIs from requesting IAM credentials from users to access Route53 hosted domains. Please use the Wildcard or Manual provider instead.</b>
+                </div>
+
+                <div ng-if="provider !== 'ami'" class="form-group" ng-class="{ 'has-error': dnsCredentialsForm.accessKeyId.$dirty && dnsCredentialsForm.accessKeyId.$invalid }" ng-show="dnsCredentials.provider === 'route53'">
                   <label class="control-label">Access Key Id</label>
                   <input type="text" class="form-control" ng-model="dnsCredentials.accessKeyId" name="accessKeyId" placeholder="Access Key Id" ng-minlength="16" ng-maxlength="32" ng-required="dnsCredentials.provider === 'route53'" ng-disabled="dnsCredentials.busy">
                 </div>
-                <div class="form-group" ng-class="{ 'has-error': dnsCredentialsForm.secretAccessKey.$dirty && dnsCredentialsForm.secretAccessKey.$invalid }" ng-show="dnsCredentials.provider === 'route53'">
+                <div ng-if="provider !== 'ami'" class="form-group" ng-class="{ 'has-error': dnsCredentialsForm.secretAccessKey.$dirty && dnsCredentialsForm.secretAccessKey.$invalid }" ng-show="dnsCredentials.provider === 'route53'">
                   <label class="control-label">Secret Access Key</label>
                   <input type="text" class="form-control" ng-model="dnsCredentials.secretAccessKey" name="secretAccessKey" placeholder="Secret Access Key" ng-required="dnsCredentials.provider === 'route53'" ng-disabled="dnsCredentials.busy">
                 </div>