· 5 years ago · Jul 29, 2020, 10:56 AM
1provider "aws" {
2 access_key = var.access_key
3 secret_key = var.secret_key
4 region = var.region
5}
6
7resource "aws_route53_zone" "main" {
8 name = "name.com"
9}
10
11resource "aws_route53_record" "ns" {
12 allow_overwrite = true
13 zone_id = aws_route53_zone.main.zone_id
14 name = "name.com"
15 type = "NS"
16 ttl = "30"
17
18 records = [
19 "ns-915.awsdns-50.net.",
20 "ns-1213.awsdns-23.org.",
21 "ns-248.awsdns-31.com.",
22 "ns-1823.awsdns-35.co.uk.",
23 ]
24}
25
26resource "aws_acm_certificate" "main" {
27 domain_name = "name.com"
28# subject_alternative_names = ["*.name.com"]
29 validation_method = "DNS"
30
31 lifecycle {
32 create_before_destroy = true
33 }
34}
35
36resource "aws_route53_record" "cert_validation" {
37 name = aws_acm_certificate.main.domain_validation_options.0.resource_record_name
38 type = aws_acm_certificate.main.domain_validation_options.0.resource_record_type
39 zone_id = aws_route53_zone.main.zone_id
40 records = [aws_acm_certificate.main.domain_validation_options.0.resource_record_value]
41 ttl = 60
42}
43
44resource "aws_acm_certificate_validation" "cert" {
45 certificate_arn = aws_acm_certificate.main.arn
46 validation_record_fqdns = [aws_route53_record.cert_validation.fqdn]
47}
48