diff --git a/assets/aws/files/install-hardened.sh b/assets/aws/files/install-hardened.sh
index 519147dafda..85ba8791d47 100644
--- a/assets/aws/files/install-hardened.sh
+++ b/assets/aws/files/install-hardened.sh
@@ -12,7 +12,7 @@ dnf install -y uuid python3
 python3 -m venv /opt/certbot
 /opt/certbot/bin/pip install --upgrade pip
 /opt/certbot/bin/pip install certbot certbot-dns-route53
-ln -s /opt/certbot/bin/certbot /usr/bin/certbot
+ln -s /opt/certbot/bin/certbot /usr/local/bin/certbot
 
 # Create teleport user. It is helpful to share the same UID
 # to have the same permissions on shared NFS volumes across auth servers and for consistency.