feat(acm-certificate): add module

Author: Script47

acm-certificate/acm.tf

@@ -0,0 +1,26 @@
+locals {
+  domains        = distinct(var.domains)
+  primary_domain = local.domains[0]
+}
+
+resource "aws_acm_certificate" "this" {
+  domain_name               = local.primary_domain
+  subject_alternative_names = local.domains
+  validation_method         = "DNS"
+  tags                      = var.tags
+
+  lifecycle {
+    create_before_destroy = true
+  }
+
+  provider = aws.acm
+}
+
+resource "aws_acm_certificate_validation" "this" {
+  count = var.zone_id == null ? 0 : 1
+
+  certificate_arn         = aws_acm_certificate.this.arn
+  validation_record_fqdns = var.zone_id == null ? [] : [for record in aws_route53_record.acm_records : record.fqdn]
+
+  provider = aws.acm
+}

acm-certificate/outputs.tf

@@ -0,0 +1,17 @@
+output "arn" {
+  value = var.zone_id == null ? aws_acm_certificate.this.arn : aws_acm_certificate_validation.this[0].certificate_arn
+}
+
+output "dns" {
+  value = {
+    domains = local.domains
+    records = {
+      for dvo in aws_acm_certificate.this.domain_validation_options :
+      dvo.domain_name => {
+        type  = dvo.resource_record_type
+        name  = dvo.resource_record_name
+        value = dvo.resource_record_value
+      }
+    }
+  }
+}

acm-certificate/providers.tf

@@ -0,0 +1,14 @@
+terraform {
+  required_version = ">= 1.13"
+
+  required_providers {
+    aws = {
+      source = "hashicorp/aws"
+      version = "~> 6"
+      configuration_aliases = [
+        aws.acm,
+        aws.default,
+      ]
+    }
+  }
+}

acm-certificate/route53.tf

@@ -0,0 +1,17 @@
+#############################################
+# Validation for the ACM cert
+#############################################
+resource "aws_route53_record" "acm_records" {
+  for_each = var.zone_id == null ? {} : {
+    for o in aws_acm_certificate.this.domain_validation_options : o.domain_name => o
+  }
+
+  zone_id         = var.zone_id
+  type            = each.value.resource_record_type
+  name            = each.value.resource_record_name
+  records         = [each.value.resource_record_value]
+  ttl             = 60
+  allow_overwrite = true
+
+  provider = aws.default
+}

acm-certificate/variables.tf

@@ -0,0 +1,20 @@
+variable "zone_id" {
+  type        = string
+  description = "The ID of the hosted zone"
+  default     = null
+}
+
+variable "domains" {
+  type        = list(string)
+  description = "List of domain names for your CloudFront distribution. The first domain specified will be classed as the primary domain (used as S3 bucket name, Route53 hosted zone name etc.)"
+
+  validation {
+    condition     = length(var.domains) > 0
+    error_message = "domains requires at least one domain to be specified"
+  }
+}
+
+variable "tags" {
+  type        = map(string)
+  description = "The tags to apply to all resources created"
+}

static-site/variables.tf

@@ -13,6 +13,7 @@ variable "hosted_zone" {
 variable "domains" {
   type        = list(string)
   description = "List of domain names for your CloudFront distribution. The first domain specified will be classed as the primary domain (used as S3 bucket name, Route53 hosted zone name etc.)"
+
   validation {
     condition     = length(var.domains) > 0
     error_message = "domains requires at least one domain to be specified"