---
AWSTemplateFormatVersion: '2010-09-09'
Description: Creates the ACM Certificate for domain
Parameters:
  CertificateExportName:
    Type: String
    Default: "test"
  DnsDomainName:
    Description: Domain to secure with the certificate (i.e. encryptaws.com)
    Type: String
    Default: "encryptaws.com"
  DnsSubDomainName:
    Description: Sub domain (default is '*') to secure with certificate
    Type: String
    Default: "*"
Resources:
  Certificate:
    Type: AWS::CertificateManager::Certificate
    Properties:
      DomainName: !Join
        - '.'
        - - !Ref DnsSubDomainName
          - !Ref DnsDomainName
      DomainValidationOptions:
        - DomainName: !Join
            - '.'
            - - !Ref DnsSubDomainName
              - !Ref DnsDomainName
          ValidationDomain: !Ref DnsDomainName
      ValidationMethod: "DNS"
Outputs:
  CertificateArn:
    Value: !Ref Certificate
    Export:
      Name: !Sub '${CertificateExportName}'