/*
resource "aws_acm_certificate" "insights_main_cert" {
  domain_name       = local.base_domain
  validation_method = "DNS"

  subject_alternative_names = [
    "*.${local.base_domain}",
    "sma.stream",
    "*.sma.stream",
  ]

  tags = merge(
    local.common_tags,
    {
      project                  = "Infrastructure",
      service                  = "ACM",
      plat_env_project_service = "${local.aggregated_tag}_INFRA_ACM"
    }
  )

  lifecycle {
    create_before_destroy = true
  }
}

resource "aws_route53_record" "insights_main_cert_validation_1st" {
  name    = tolist(aws_acm_certificate.insights_main_cert.domain_validation_options)[0].resource_record_name
  type    = tolist(aws_acm_certificate.insights_main_cert.domain_validation_options)[0].resource_record_type
  zone_id = aws_route53_zone.insights_stream.id
  records = [
    tolist(aws_acm_certificate.insights_main_cert.domain_validation_options)[0].resource_record_value,
  ]
  ttl = 60
}

resource "aws_route53_record" "insights_main_cert_validation_2nd" {
  name    = tolist(aws_acm_certificate.insights_main_cert.domain_validation_options)[1].resource_record_name
  type    = tolist(aws_acm_certificate.insights_main_cert.domain_validation_options)[1].resource_record_type
  zone_id = data.aws_route53_zone.sma_stream_zone.id
  ttl     = 60
  records = [
    tolist(aws_acm_certificate.insights_main_cert.domain_validation_options)[1].resource_record_value,
  ]
}

resource "aws_acm_certificate_validation" "insights_main_cert" {
  certificate_arn = aws_acm_certificate.insights_main_cert.arn
  validation_record_fqdns = [
    aws_route53_record.insights_main_cert_validation_1st.fqdn,
    aws_route53_record.insights_main_cert_validation_2nd.fqdn,
  ]
}
*/
