resource "aws_acm_certificate" "this" {
  provider = aws.this

  domain_name       = local.domain_name
  validation_method = "DNS"

  lifecycle {
    create_before_destroy = true
  }

  tags = {
    service = "ACM"
  }
}

resource "aws_acm_certificate_validation" "this" {
  provider = aws.this

  certificate_arn = aws_acm_certificate.this.arn
  validation_record_fqdns = [
    aws_route53_record.this_acm.fqdn,
  ]
}