text Terraform：ACM与DNS验证

Posted 2021-04-29

# ------------------------------------------------------------
# Discover Zone Information for DNS Domain
# ------------------------------------------------------------
data "aws_route53_zone" "public" {
  name = "${var.app_dns_domain}"
}

# ------------------------------------------------------------
# ACM Certificate Creation
# ------------------------------------------------------------
resource "aws_acm_certificate" "application" {
  domain_name = "${var.app_dns_name}"
  validation_method = "DNS"

  subject_alternative_names = [
    "*.${var.app_dns_name}"
  ]

  tags {
    Name = "${var.app_dns_name}"
    Owner = "${var.tag_owner}"
    Subsystem = "${var.tag_subsystem}"
    Environment = "${var.environment}"
  }

  lifecycle {
    create_before_destroy = true
  }
}

# ------------------------------------------------------------
# ACM Validation Records
# ------------------------------------------------------------
resource "aws_route53_record" "acm_validation" {
  count = "${length(aws_acm_certificate.application)}"
  
  zone_id = "${data.aws_route53_record.public.zone_id}"
  name = "${aws_acm_certificate.application.domain_validation_options.*.resource_record_name[count.index]}"
  type = "${aws_acm_certificate.application.domain_validation_options.*.resource_record_type[count.index]}"
  records = ["${aws_acm_certificate.application.domain_validation_options.*.resource_record_value[count.index]}"]
  ttl = 60
}