acm.tf

AWS Certificate Manager 에 해당도메인에 해당하는 인증서를 만들도록 합니다.

resource "aws_acm_certificate" "cert" {
  domain_name = var.domain_name

  subject_alternative_names = [
    "*.${var.domain_name}"
  ]

  validation_method = "DNS"
}

resource "aws_route53_record" "cert" {
  zone_id = data.aws_route53_zone.this.id

  name = aws_acm_certificate.cert.domain_validation_options[0].resource_record_name
  type = aws_acm_certificate.cert.domain_validation_options[0].resource_record_type
  ttl  = 60

  records = [
    aws_acm_certificate.cert.domain_validation_options[0].resource_record_value,
  ]
}

resource "aws_acm_certificate_validation" "cert" {
  certificate_arn = aws_acm_certificate.cert.arn

  validation_record_fqdns = [
    aws_route53_record.cert.fqdn,
  ]
}