forked from futurice/terraform-examples
-
Notifications
You must be signed in to change notification settings - Fork 0
/
certificate.tf
22 lines (20 loc) · 1.12 KB
/
certificate.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
# Generate a certificate for the domain automatically using ACM
# https://www.terraform.io/docs/providers/aws/r/acm_certificate.html
resource "aws_acm_certificate" "this" {
domain_name = "${var.api_domain}"
validation_method = "DNS" # the required records are created below
tags = "${merge(var.tags, map("Name", "${var.comment_prefix}${var.api_domain}"))}"
}
# Add the DNS records needed by the ACM validation process
resource "aws_route53_record" "cert_validation" {
name = "${aws_acm_certificate.this.domain_validation_options.0.resource_record_name}"
type = "${aws_acm_certificate.this.domain_validation_options.0.resource_record_type}"
zone_id = "${data.aws_route53_zone.this.zone_id}"
records = ["${aws_acm_certificate.this.domain_validation_options.0.resource_record_value}"]
ttl = 60
}
# Request a validation for the cert with ACM
resource "aws_acm_certificate_validation" "this" {
certificate_arn = "${aws_acm_certificate.this.arn}"
validation_record_fqdns = ["${aws_route53_record.cert_validation.fqdn}"]
}