resource "aws_acm_certificate" "this" { domain_name = var.domain_name subject_alternative_names = var.subject_alternative_names validation_method = "DNS" lifecycle { create_before_destroy = false } tags = var.tags }