AWS Certificate Manager 에 해당도메인에 해당하는 인증서를 만들도록 합니다.
resource "aws_acm_certificate" "cert" {
domain_name = var.domain_name
subject_alternative_names = [
"*.${var.domain_name}"
]
validation_method = "DNS"
}
resource "aws_route53_record" "cert" {
zone_id = data.aws_route53_zone.this.id
name = aws_acm_certificate.cert.domain_validation_options[0].resource_record_name
type = aws_acm_certificate.cert.domain_validation_options[0].resource_record_type
ttl = 60
records = [
aws_acm_certificate.cert.domain_validation_options[0].resource_record_value,
]
}
resource "aws_acm_certificate_validation" "cert" {
certificate_arn = aws_acm_certificate.cert.arn
validation_record_fqdns = [
aws_route53_record.cert.fqdn,
]
}