From 927958613ec7e2065b23b3575419c7cf38f83f28 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ale=C5=A1=20Roub=C3=AD=C4=8Dek?= <ales@roubicek.name>
Date: Fri, 29 Oct 2021 11:03:04 +0200
Subject: [PATCH] Allow to define custom CAA records

---
 website.ts | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/website.ts b/website.ts
index 3337415..100ae63 100644
--- a/website.ts
+++ b/website.ts
@@ -378,9 +378,10 @@ export function getHostedZone(domain: string, provider?: aws.Provider) {
  * You will need to have just one instance per all your stacks.
  * @param domain {string} website domain name
  * @param provider {aws.Provider}
+ * @param options {{caaRecords: string[]}}
  * @returns {pulumi.Output<pulumi.Unwrap<aws.acm.GetCertificateResult>>}
  */
-export function createCertificate(domain: string, provider?: aws.Provider) {
+export function createCertificate(domain: string, provider?: aws.Provider, {caaRecords} = {caaRecords: []}) {
   const parentDomain = getParentDomain(domain);
   const usEast1 =
     provider ??
@@ -422,7 +423,8 @@ export function createCertificate(domain: string, provider?: aws.Provider) {
       `0 issuewild "amazontrust.com"`,
       `0 issuewild "awstrust.com"`,
       `0 issuewild "amazonaws.com"`,
-      `0 iodef "mailto:admin@topmonks.com"`
+      `0 iodef "mailto:admin@topmonks.com"`,
+      ...caaRecords
     ],
     ttl: 3600
   });