1
- data "aws_route53_zone" "parent_zone " {
1
+ data "aws_route53_zone" "this " {
2
2
zone_id = var. r53_zone_id
3
3
private_zone = false
4
4
}
5
5
6
- resource "aws_acm_certificate" "primary " {
7
- domain_name = " ${ var . tenant_name } . ${ data . aws_route53_zone . parent_zone . name } "
6
+ resource "aws_acm_certificate" "this " {
7
+ domain_name = var. domain_name
8
8
validation_method = " DNS"
9
9
10
- subject_alternative_names = [ " origin. ${ var . tenant_name } . ${ data . aws_route53_zone . parent_zone . name } " ]
10
+ subject_alternative_names = var. subject_alternative_names
11
11
12
12
options {
13
13
certificate_transparency_logging_preference = " ENABLED"
@@ -17,19 +17,12 @@ resource "aws_acm_certificate" "primary" {
17
17
create_before_destroy = true
18
18
}
19
19
20
- tags = merge (
21
- var. tags ,
22
- {
23
- Name = " ${ var . tenant_name } -primary" ,
24
- SaaSResoure = true ,
25
- DedicatedToTenant = true ,
26
- },
27
- )
20
+ tags = var. tags
28
21
}
29
22
30
- resource "aws_route53_record" "acm_validation " {
23
+ resource "aws_route53_record" "this " {
31
24
for_each = {
32
- for dvo in aws_acm_certificate . primary . domain_validation_options : dvo . domain_name => {
25
+ for dvo in aws_acm_certificate . this . domain_validation_options : dvo . domain_name => {
33
26
name = dvo.resource_record_name
34
27
record = dvo.resource_record_value
35
28
type = dvo.resource_record_type
@@ -39,14 +32,14 @@ resource "aws_route53_record" "acm_validation" {
39
32
allow_overwrite = true
40
33
name = each. value . name
41
34
records = [each . value . record ]
42
- ttl = 60
35
+ ttl = var . ttl
43
36
type = each. value . type
44
37
zone_id = var. r53_zone_id
45
38
}
46
39
47
- resource "aws_acm_certificate_validation" "primary " {
48
- certificate_arn = aws_acm_certificate. primary . arn
49
- validation_record_fqdns = [for record in aws_route53_record . acm_validation : record . fqdn ]
40
+ resource "aws_acm_certificate_validation" "this " {
41
+ certificate_arn = aws_acm_certificate. this . arn
42
+ validation_record_fqdns = [for record in aws_route53_record . this : record . fqdn ]
50
43
51
44
timeouts {
52
45
create = " 60m"
0 commit comments