# # SSL certificate
# // new certificate for smooth migration
# resource "aws_acm_certificate" "insights_main_cert" {
#   domain_name       = local.base_domain
#   validation_method = "DNS"
#
#   subject_alternative_names = [
#     "*.${local.base_domain}",
#     "*.sma.stream",
#     "dev-artistapp-api.apollo.stream",
#     "qa-artistapp-api.apollo.stream",
#     "stage-artistapp-api.apollo.stream",
#   ]
#
#   tags = merge(
#     local.common_tags,
#     {
#       project                  = "Infrastructure",
#       service                  = "ACM",
#       plat_env_project_service = "${local.aggregated_tag}_INFRA_ACM"
#     }
#   )
#
#   lifecycle {
#     create_before_destroy = true
#   }
# }
#
# resource "aws_route53_record" "insights_main_cert_validation_1st" {
#   name    = tolist(aws_acm_certificate.insights_main_cert.domain_validation_options)[0].resource_record_name
#   type    = tolist(aws_acm_certificate.insights_main_cert.domain_validation_options)[0].resource_record_type
#   zone_id = data.aws_route53_zone.insights_stream_zone.id
#   records = [
#     tolist(aws_acm_certificate.insights_main_cert.domain_validation_options)[0].resource_record_value,
#   ]
#   ttl      = 60
#   provider = aws.gdb-artistapp-prod
# }
#
# resource "aws_route53_record" "insights_main_cert_validation_2nd" {
#   name    = tolist(aws_acm_certificate.insights_main_cert.domain_validation_options)[1].resource_record_name
#   type    = tolist(aws_acm_certificate.insights_main_cert.domain_validation_options)[1].resource_record_type
#   zone_id = data.aws_route53_zone.sma_stream_zone.id
#   records = [
#     tolist(aws_acm_certificate.insights_main_cert.domain_validation_options)[1].resource_record_value,
#   ]
#   ttl      = 60
#   provider = aws.gdb-artistapp-prod
# }
#
# resource "aws_route53_record" "insights_main_cert_validation_3rd" {
#   name    = tolist(aws_acm_certificate.insights_main_cert.domain_validation_options)[2].resource_record_name
#   type    = tolist(aws_acm_certificate.insights_main_cert.domain_validation_options)[2].resource_record_type
#   zone_id = data.aws_route53_zone.apollo_stream_zone.id
#   records = [
#     tolist(aws_acm_certificate.insights_main_cert.domain_validation_options)[2].resource_record_value,
#   ]
#   ttl      = 60
#   provider = aws.gdb-delphi-dev
# }
#
# resource "aws_route53_record" "insights_main_cert_validation_4th" {
#   name    = tolist(aws_acm_certificate.insights_main_cert.domain_validation_options)[4].resource_record_name
#   type    = tolist(aws_acm_certificate.insights_main_cert.domain_validation_options)[4].resource_record_type
#   zone_id = data.aws_route53_zone.apollo_stream_zone.id
#   records = [
#     tolist(aws_acm_certificate.insights_main_cert.domain_validation_options)[4].resource_record_value,
#   ]
#   ttl      = 60
#   provider = aws.gdb-delphi-dev
# }
#
# resource "aws_route53_record" "insights_main_cert_validation_5th" {
#   name    = tolist(aws_acm_certificate.insights_main_cert.domain_validation_options)[5].resource_record_name
#   type    = tolist(aws_acm_certificate.insights_main_cert.domain_validation_options)[5].resource_record_type
#   zone_id = data.aws_route53_zone.apollo_stream_zone.id
#   records = [
#     tolist(aws_acm_certificate.insights_main_cert.domain_validation_options)[5].resource_record_value,
#   ]
#   ttl      = 60
#   provider = aws.gdb-delphi-dev
# }
#
# resource "aws_acm_certificate_validation" "insights_main_cert" {
#   certificate_arn = aws_acm_certificate.insights_main_cert.arn
#   validation_record_fqdns = [
#     aws_route53_record.insights_main_cert_validation_1st.fqdn,
#     aws_route53_record.insights_main_cert_validation_2nd.fqdn,
#     aws_route53_record.insights_main_cert_validation_3rd.fqdn,
#     aws_route53_record.insights_main_cert_validation_4th.fqdn,
#     aws_route53_record.insights_main_cert_validation_5th.fqdn,
#   ]
# }
#
#
