Module library

Certificate Manager

Terraform module to create AWS ACM resources

Version

Inputs

24
acm_certificate_domain_validation_optionsoptionalany

A list of domain_validation_options created by the ACM certificate to create required Route53 records from it (used when create_route53_records_only is set to true)

Default{}
certificate_transparency_logging_preferenceoptionalbool

Specifies whether certificate details should be added to a certificate transparency log

Defaulttrue
create_certificateoptionalbool

Whether to create ACM certificate

Defaulttrue
create_route53_recordsoptionalbool

When validation is set to DNS, define whether to create the DNS records internally via Route53 or externally using any DNS provider

Defaulttrue
create_route53_records_onlyoptionalbool

Whether to create only Route53 records (e.g. using separate AWS provider)

Defaultfalse
distinct_domain_namesoptionallist(string)

List of distinct domains and SANs (used when create_route53_records_only is set to true)

Default[]
dns_ttloptionalnumber

The TTL of DNS recursive resolvers to cache information about this record.

Default60
domain_nameoptionalstring

A domain name for which the certificate should be issued

Default""
exportoptionalstring

Whether the certificate can be exported. Valid values are ENABLED or DISABLED (default). Note Issuing an exportable certificate is subject to additional charges

Defaultnull
key_algorithmoptionalstring

Specifies the algorithm of the public and private key pair that your Amazon issued certificate uses to encrypt data

Defaultnull
private_authority_arnoptionalstring

Private Certificate Authority ARN for issuing private certificates

Defaultnull
putin_khuylooptionalbool

Do you agree that Putin doesn't respect Ukrainian sovereignty and territorial integrity? More info: https://en.wikipedia.org/wiki/Putin_khuylo!

Defaulttrue
regionoptionalstring

Region to create the resources into

Defaultnull
subject_alternative_namesoptionallist(string)

A list of domains that should be SANs in the issued certificate

Default[]
tagsoptionalmap(string)

A mapping of tags to assign to the resource

Default{}
validate_certificateoptionalbool

Whether to validate certificate by creating Route53 record

Defaulttrue
validation_allow_overwrite_recordsoptionalbool

Whether to allow overwrite of Route53 records

Defaulttrue
validation_methodoptionalstring

Which method to use for validation. DNS or EMAIL are valid. This parameter must not be set for certificates that were imported into ACM and then into Terraform.

Defaultnull
validation_optionoptionalany

The domain name that you want ACM to use to send you validation emails. This domain name is the suffix of the email addresses that you want ACM to use.

Default{}
validation_record_fqdnsoptionallist(string)

When validation is set to DNS and the DNS validation records are set externally, provide the fqdns for the validation

Default[]
validation_timeoutoptionalstring

Define maximum timeout to wait for the validation to complete

Defaultnull
wait_for_validationoptionalbool

Whether to wait for the validation to complete

Defaulttrue
zone_idoptionalstring

The ID of the hosted zone to contain this record. Required when validating via Route53

Default""
zonesoptionalmap(string)

Map containing the Route53 Zone IDs for additional domains.

Default{}

All 24 are optional — the module deploys with none of them set.

Outputs

7
acm_certificate_arn

The ARN of the certificate

acm_certificate_domain_validation_options

A list of attributes to feed into other resources to complete certificate validation. Can have more than one element, e.g. if SANs are defined. Only set if DNS-validation was used.

acm_certificate_status

Status of the certificate.

acm_certificate_validation_emails

A list of addresses that received a validation E-Mail. Only set if EMAIL-validation was used.

distinct_domain_names

List of distinct domains names used for the validation.

validation_domains

List of distinct domain validation options. This is useful if subject alternative names contain wildcards.

validation_route53_record_fqdns

List of FQDNs built using the zone domain and name.

What the agent wires into the next module. An edge on the architecture diagram is one of these consumed by something else.