ACM Certificate Module

Deploy an AWS Certificate Manager certificate with automated Route53 DNS validation and renewal tracking.

What You'll Build

• ACM certificate with wildcard or domain-specific coverage
• Automated Route53 CNAME validation records
• Certificate validation status tracking
• Renewal readiness monitoring

How to Use

module "acm_cert" {
  source = "github.com/nnthanh101/terraform-aws/modules/terraform_aws_acm_certificate"

  domain_name            = "example.com"
  subject_alternative_names = ["*.example.com", "api.example.com"]
  validation_method      = "DNS"
  
  # Route53 zone for validation
  route53_zone_id = aws_route53_zone.main.zone_id

  tags = {
    Environment = "prod"
    Service     = "api"
  }
}

Key Variables

Variable	Type	Purpose
domain_name	string	Primary domain for the certificate
subject_alternative_names	list(string)	Additional domains (wildcard, subdomains)
validation_method	string	"DNS" or "EMAIL"
route53_zone_id	string	Route53 zone ID for DNS validation records

Outputs

Output	Use Case
certificate_arn	CloudFront, ALB, API Gateway certificate binding
certificate_domain_validation_options	Custom validation record routing

Integration

• CloudFront: Use certificate_arn in viewer_certificate block
• ALB: Bind to listener as default certificate
• API Gateway: Custom domain certificate binding

Source Reference

Module: terraform-aws/modules/acm