Certificate Manager
Terraform module to create AWS ACM resources
Inputs
24
acm_certificate_domain_validation_optionsoptionalanyA list of domain_validation_options created by the ACM certificate to create required Route53 records from it (used when create_route53_records_only is set to true)
{}certificate_transparency_logging_preferenceoptionalboolSpecifies whether certificate details should be added to a certificate transparency log
truecreate_certificateoptionalboolWhether to create ACM certificate
truecreate_route53_recordsoptionalboolWhen validation is set to DNS, define whether to create the DNS records internally via Route53 or externally using any DNS provider
truecreate_route53_records_onlyoptionalboolWhether to create only Route53 records (e.g. using separate AWS provider)
falsedistinct_domain_namesoptionallist(string)List of distinct domains and SANs (used when create_route53_records_only is set to true)
[]dns_ttloptionalnumberThe TTL of DNS recursive resolvers to cache information about this record.
60domain_nameoptionalstringA domain name for which the certificate should be issued
""exportoptionalstringWhether the certificate can be exported. Valid values are ENABLED or DISABLED (default). Note Issuing an exportable certificate is subject to additional charges
nullkey_algorithmoptionalstringSpecifies the algorithm of the public and private key pair that your Amazon issued certificate uses to encrypt data
nullprivate_authority_arnoptionalstringPrivate Certificate Authority ARN for issuing private certificates
nullputin_khuylooptionalboolDo you agree that Putin doesn't respect Ukrainian sovereignty and territorial integrity? More info: https://en.wikipedia.org/wiki/Putin_khuylo!
trueregionoptionalstringRegion to create the resources into
nullsubject_alternative_namesoptionallist(string)A list of domains that should be SANs in the issued certificate
[]tagsoptionalmap(string)A mapping of tags to assign to the resource
{}validate_certificateoptionalboolWhether to validate certificate by creating Route53 record
truevalidation_allow_overwrite_recordsoptionalboolWhether to allow overwrite of Route53 records
truevalidation_methodoptionalstringWhich method to use for validation. DNS or EMAIL are valid. This parameter must not be set for certificates that were imported into ACM and then into Terraform.
nullvalidation_optionoptionalanyThe domain name that you want ACM to use to send you validation emails. This domain name is the suffix of the email addresses that you want ACM to use.
{}validation_record_fqdnsoptionallist(string)When validation is set to DNS and the DNS validation records are set externally, provide the fqdns for the validation
[]validation_timeoutoptionalstringDefine maximum timeout to wait for the validation to complete
nullwait_for_validationoptionalboolWhether to wait for the validation to complete
truezone_idoptionalstringThe ID of the hosted zone to contain this record. Required when validating via Route53
""zonesoptionalmap(string)Map containing the Route53 Zone IDs for additional domains.
{}All 24 are optional — the module deploys with none of them set.
Outputs
7
acm_certificate_arnThe ARN of the certificate
acm_certificate_domain_validation_optionsA list of attributes to feed into other resources to complete certificate validation. Can have more than one element, e.g. if SANs are defined. Only set if DNS-validation was used.
acm_certificate_statusStatus of the certificate.
acm_certificate_validation_emailsA list of addresses that received a validation E-Mail. Only set if EMAIL-validation was used.
distinct_domain_namesList of distinct domains names used for the validation.
validation_domainsList of distinct domain validation options. This is useful if subject alternative names contain wildcards.
validation_route53_record_fqdnsList of FQDNs built using the zone domain and name.
What the agent wires into the next module. An edge on the architecture diagram is one of these consumed by something else.