Skip to main content
Version: v1.7

AWS ACM

Description​

Terraform module which creates and validates ACM certificate

Specification​

Properties​

NameDescriptionTypeRequiredDefault
certificate_transparency_logging_preferenceSpecifies whether certificate details should be added to a certificate transparency logboolfalse
create_certificateWhether to create ACM certificateboolfalse
create_route53_recordsWhen validation is set to DNS, define whether to create the DNS records internally via Route53 or externally using any DNS providerboolfalse
dns_ttlThe TTL of DNS recursive resolvers to cache information about this record.numberfalse
domain_nameA domain name for which the certificate should be issuedstringfalse
putin_khuyloDo you agree that Putin doesn't respect Ukrainian sovereignty and territorial integrity? More info: https://en.wikipedia.org/wiki/Putin_khuylo!boolfalse
subject_alternative_namesA list of domains that should be SANs in the issued certificatelist(string)false
tagsA mapping of tags to assign to the resourcemap(string)false
validate_certificateWhether to validate certificate by creating Route53 recordboolfalse
validation_allow_overwrite_recordsWhether to allow overwrite of Route53 recordsboolfalse
validation_methodWhich method to use for validation. DNS or EMAIL are valid, NONE can be used for certificates that were imported into ACM and then into Terraform.stringfalse
validation_record_fqdnsWhen validation is set to DNS and the DNS validation records are set externally, provide the fqdns for the validationlist(string)false
wait_for_validationWhether to wait for the validation to completeboolfalse
writeConnectionSecretToRefThe secret which the cloud resource connection will be written towriteConnectionSecretToReffalse
zone_idThe ID of the hosted zone to contain this record. Required when validating via Route53stringfalse

writeConnectionSecretToRef​

NameDescriptionTypeRequiredDefault
nameThe secret name which the cloud resource connection will be written tostringtrue
namespaceThe secret namespace which the cloud resource connection will be written tostringfalse