1- data "aws_route53_zone" "parent_zone " {
1+ data "aws_route53_zone" "this " {
22 zone_id = var. r53_zone_id
33 private_zone = false
44}
55
6- resource "aws_acm_certificate" "primary " {
7- domain_name = " ${ var . tenant_name } . ${ data . aws_route53_zone . parent_zone . name } "
6+ resource "aws_acm_certificate" "this " {
7+ domain_name = var. domain_name
88 validation_method = " DNS"
99
10- subject_alternative_names = [ " origin. ${ var . tenant_name } . ${ data . aws_route53_zone . parent_zone . name } " ]
10+ subject_alternative_names = var. subject_alternative_names
1111
1212 options {
1313 certificate_transparency_logging_preference = " ENABLED"
@@ -17,19 +17,12 @@ resource "aws_acm_certificate" "primary" {
1717 create_before_destroy = true
1818 }
1919
20- tags = merge (
21- var. tags ,
22- {
23- Name = " ${ var . tenant_name } -primary" ,
24- SaaSResoure = true ,
25- DedicatedToTenant = true ,
26- },
27- )
20+ tags = var. tags
2821}
2922
30- resource "aws_route53_record" "acm_validation " {
23+ resource "aws_route53_record" "this " {
3124 for_each = {
32- for dvo in aws_acm_certificate . primary . domain_validation_options : dvo . domain_name => {
25+ for dvo in aws_acm_certificate . this . domain_validation_options : dvo . domain_name => {
3326 name = dvo.resource_record_name
3427 record = dvo.resource_record_value
3528 type = dvo.resource_record_type
@@ -39,14 +32,14 @@ resource "aws_route53_record" "acm_validation" {
3932 allow_overwrite = true
4033 name = each. value . name
4134 records = [each . value . record ]
42- ttl = 60
35+ ttl = var . ttl
4336 type = each. value . type
4437 zone_id = var. r53_zone_id
4538}
4639
47- resource "aws_acm_certificate_validation" "primary " {
48- certificate_arn = aws_acm_certificate. primary . arn
49- validation_record_fqdns = [for record in aws_route53_record . acm_validation : record . fqdn ]
40+ resource "aws_acm_certificate_validation" "this " {
41+ certificate_arn = aws_acm_certificate. this . arn
42+ validation_record_fqdns = [for record in aws_route53_record . this : record . fqdn ]
5043
5144 timeouts {
5245 create = " 60m"
0 commit comments