https://github.com/plus3it/terraform-aws-tardigrade-acm
https://github.com/plus3it/terraform-aws-tardigrade-acm
tardigrade terraform
Last synced: about 1 year ago
JSON representation
- Host: GitHub
- URL: https://github.com/plus3it/terraform-aws-tardigrade-acm
- Owner: plus3it
- License: apache-2.0
- Created: 2019-12-30T19:24:50.000Z (over 6 years ago)
- Default Branch: master
- Last Pushed: 2025-06-30T18:08:38.000Z (about 1 year ago)
- Last Synced: 2025-06-30T19:24:22.699Z (about 1 year ago)
- Topics: tardigrade, terraform
- Language: HCL
- Size: 324 KB
- Stars: 2
- Watchers: 9
- Forks: 8
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- License: LICENSE
Awesome Lists containing this project
README
# terraform-aws-tardigrade-acm
A Terraform module to create DNS-validated certificates using ACM
## Testing
At the moment, testing is manual and requires access to the Plus3IT account
303523384066 where the zone tardigrade.cloudarmor.io exists:
```
# Replace "xxx" with the AWS profile, then execute the integration tests.
AWS_PROFILE=xxx make terraform/pytest PYTEST_ARGS="-v --nomock"
```
## Requirements
| Name | Version |
|------|---------|
| [terraform](#requirement\_terraform) | >= 0.13.0 |
## Providers
| Name | Version |
|------|---------|
| [aws](#provider\_aws) | n/a |
## Resources
| Name | Type |
|------|------|
| [aws_route53_zone.this](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/route53_zone) | data source |
## Inputs
| Name | Description | Type | Default | Required |
|------|-------------|------|---------|:--------:|
| [domain\_name](#input\_domain\_name) | Domain name to use for the ACM certificate | `string` | n/a | yes |
| [zone\_id](#input\_zone\_id) | Route53 zone ID in which to create the DNS validation records | `string` | n/a | yes |
| [certificate\_transparency\_logging\_preference](#input\_certificate\_transparency\_logging\_preference) | Value to apply to the certificate transparency logging preference for the ACM certificate | `string` | `"ENABLED"` | no |
| [create\_certificate\_validation](#input\_create\_certificate\_validation) | Boolean controlling whether to create the ACM certificate validation resource | `bool` | `true` | no |
| [subject\_alternative\_names](#input\_subject\_alternative\_names) | Subject alternative names to associate with the ACM certificate | `list(string)` | `[]` | no |
| [tags](#input\_tags) | Map of tags to apply to all resources that support tags | `map(string)` | `{}` | no |
| [ttl](#input\_ttl) | Time-to-live for the DNS validation records | `number` | `300` | no |
| [zone\_name](#input\_zone\_name) | Route53 zone name of zone\_id, used to determine whether to create a validation record in the provided zone | `string` | `null` | no |
## Outputs
| Name | Description |
|------|-------------|
| [acm\_certificate](#output\_acm\_certificate) | The ACM certificate object |
| [acm\_certificate\_validation](#output\_acm\_certificate\_validation) | The ACM certificate validation object |
| [route53\_validation\_records](#output\_route53\_validation\_records) | Map of Route53 validation record objects, one per unique domain name and SAN |