acm

Requests ACM certificates with automatic DNS validation via Route 53.

Provisions ACM certificates for one or more domains, creates Route 53 CNAME validation records in the specified hosted zone, and optionally blocks until certificates reach the ISSUED state. For CloudFront certificates, apply this module in us-east-1 using a provider alias. EMAIL validation is supported but requires manual action.

Usage

module "acm" {
  source  = "hcassc.jfrog.io/iac-terraform-modules-virtual/security/acm/aws"
  version = "0.1.0"

  certificates = {
    api = {
      domain_name  = "api.example.com"
      zone_name    = "example.com"
      subject_alternative_names = ["*.api.example.com"]
    }
  }
}

Requirements

Name	Version
terraform	~> 1.5
aws	~> 6.50

Providers

Name	Version
aws	6.50.0

Resources

Name	Type
aws_acm_certificate.this	resource
aws_acm_certificate_validation.this	resource
aws_route53_record.validation	resource

Inputs

Name	Description	Type	Default	Required
certificates	Map of certificates to request. validation_method must be DNS or EMAIL.subject_alternative_names is an optional list of additional FQDNs.zone_name is required for DNS validation — it is looked up via a data source.	map(object({ domain_name = string validation_method = optional(string, "DNS") subject_alternative_names = optional(list(string), []) zone_name = optional(string, null) key_algorithm = optional(string, "RSA_2048") }))	{}	no
tags	Resource tags to apply to all resources	map(string)	{}	no
wait_for_validation	Block until all DNS-validated certificates are issued	bool	true	no

Outputs

Name	Description
certificate_arns	Map of logical certificate key to ARN
certificate_domain_names	Map of logical certificate key to primary domain name
certificate_statuses	Map of logical certificate key to validation status