https://github.com/azavea/terraform-aws-acm-certificate

A Terraform module to create an Amazon Certificate Manager (ACM) certificate with Route 53 DNS validation.
https://github.com/azavea/terraform-aws-acm-certificate

amazon-web-services aws aws-acm aws-route53 terraform terraform-modules

Last synced: 2 months ago
JSON representation

A Terraform module to create an Amazon Certificate Manager (ACM) certificate with Route 53 DNS validation.

• Host: GitHub
• URL: https://github.com/azavea/terraform-aws-acm-certificate
• Owner: azavea
• License: apache-2.0
• Created: 2018-06-27T15:08:42.000Z (over 6 years ago)
• Default Branch: develop
• Last Pushed: 2022-09-21T20:50:44.000Z (over 2 years ago)
• Last Synced: 2024-10-30T15:51:12.253Z (3 months ago)
• Topics: amazon-web-services, aws, aws-acm, aws-route53, terraform, terraform-modules
• Language: HCL
• Homepage:
• Size: 35.2 KB
• Stars: 47
• Watchers: 9
• Forks: 41
• Open Issues: 2
• Metadata Files:
  • Readme: README.md
  • Changelog: CHANGELOG.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# terraform-aws-acm-certificate

[![CircleCI](https://circleci.com/gh/azavea/terraform-aws-acm-certificate.svg?style=svg)](https://circleci.com/gh/azavea/terraform-aws-acm-certificate)

A Terraform module to create an Amazon Certificate Manager (ACM) certificate with Route 53 DNS validation.

## Usage

When making use of this module, ensure that either the `AWS_DEFAULT_REGION` or `AWS_REGION` environment variable is set. This helps bypass [validation checks](https://github.com/hashicorp/terraform/issues/21408) that want the `provider` blocks within this module to have a `region` attribute specified.

```hcl

provider "aws" {

  region = "us-east-1"

  alias  = "certificates"

}

provider "aws" {

  region = "us-west-2"

  alias  = "dns"

}

resource "aws_route53_zone" "default" {

  name = "azavea.com"

}

module "cert" {

  source = "github.com/azavea/terraform-aws-acm-certificate"

  providers = {

    aws.acm_account     = "aws.certificates"

    aws.route53_account = "aws.dns"

  }

  domain_name                       = "azavea.com"

  subject_alternative_names         = ["*.azavea.com"]

  hosted_zone_id                    = "${aws_route53_zone.default.zone_id}"

  validation_record_ttl             = "60"

  allow_validation_record_overwrite = true

}

```

## Variables

- `domain_name` - Primary domain name associated with certificate. Also used for the Name tag of the ACM certificate.

- `subject_alternative_names` - Subject alternative domain names.

- `hosted_zone_id` - Route 53 hosted zone ID for `domain_name`.

- `validation_record_ttl` - Route 53 record time-to-live (TTL) for validation record (default: `60`).

- `allow_validation_record_overwrite` - Allow Route 53 record creation to overwrite existing records (default: `true`).

- `tags` - A map of extra tags that is associated with the ACM Certificate.

## Outputs

- `arn` - The Amazon Resource Name (ARN) of the ACM certificate