terraform-aws-tardigrade-acm

A Terraform module to create DNS-validated certificates using ACM

Testing

At the moment, testing is manual and requires access to the Plus3IT account 303523384066 where the zone tardigrade.cloudarmor.io exists:

# Replace "xxx" with the AWS profile, then execute the integration tests.
AWS_PROFILE=xxx make terraform/pytest PYTEST_ARGS="-v --nomock"

Requirements

Name	Version
terraform	>= 0.13.0

Providers

Name	Version
aws	n/a

Resources

Name	Type
aws_route53_zone.this	data source

Inputs

Name	Description	Type	Default	Required
domain_name	Domain name to use for the ACM certificate	string	n/a	yes
zone_id	Route53 zone ID in which to create the DNS validation records	string	n/a	yes
certificate_transparency_logging_preference	Value to apply to the certificate transparency logging preference for the ACM certificate	string	"ENABLED"	no
create_certificate_validation	Boolean controlling whether to create the ACM certificate validation resource	bool	true	no
subject_alternative_names	Subject alternative names to associate with the ACM certificate	list(string)	[]	no
tags	Map of tags to apply to all resources that support tags	map(string)	{}	no
ttl	Time-to-live for the DNS validation records	number	300	no
zone_name	Route53 zone name of zone_id, used to determine whether to create a validation record in the provided zone	string	null	no

Outputs

Name	Description
acm_certificate	The ACM certificate object
acm_certificate_validation	The ACM certificate validation object
route53_validation_records	Map of Route53 validation record objects, one per unique domain name and SAN