# locals =====================================================================

locals {
  tags = merge(
    {
      ManagedBy = "terraform"
      Module    = "security/acm"
    },
    var.tags,
  )

  # Only DNS-validated certs with a zone_name get Route 53 records
  dns_validated = {
    for k, v in var.certificates : k => v
    if v.validation_method == "DNS" && v.zone_name != null
  }
}