acm.com.example._.tf

# --------------------------------
# ACM Certificate for *.example.com
resource "aws_acm_certificate" "certificate_com_example_" {
  domain_name               = "${aws_route53_record.record_com_example.fqdn}"
  subject_alternative_names = ["*.${aws_route53_record.record_com_example.fqdn}"]
  validation_method         = "DNS"
}

# for example.com
resource "aws_route53_record" "certificate-validation-records_com_example" {
  name    = "${aws_acm_certificate.certificate_com_example_.domain_validation_options.0.resource_record_name}"
  type    = "${aws_acm_certificate.certificate_com_example_.domain_validation_options.0.resource_record_type}"
  zone_id = "${aws_route53_zone.zone_com_example.zone_id}"
  records = ["${aws_acm_certificate.certificate_com_example_.domain_validation_options.0.resource_record_value}"]
  ttl     = 60
}

# for *.example.com
resource "aws_route53_record" "certificate-validation-records_com_example_" {
  name    = "${aws_acm_certificate.certificate_com_example_.domain_validation_options.1.resource_record_name}"
  type    = "${aws_acm_certificate.certificate_com_example_.domain_validation_options.1.resource_record_type}"
  zone_id = "${aws_route53_zone.zone_com_example.zone_id}"
  records = ["${aws_acm_certificate.certificate_com_example_.domain_validation_options.1.resource_record_value}"]
  ttl     = 60
}

resource "aws_acm_certificate_validation" "certificate-validation_com_example_" {
  certificate_arn = "${aws_acm_certificate.certificate_com_example_.arn}"

  validation_record_fqdns = [
    "${aws_route53_record.certificate-validation-records_com_example.fqdn}",
    "${aws_route53_record.certificate-validation-records_com_example_.fqdn}",
  ]
}