cloudformation/certificate.yaml at develop · glawit/cloudformation · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
---


AWSTemplateFormatVersion: 2010-09-09


Description: 'git LFS: SSL certificate for custom API endpoint'


Metadata:

   AWS::CloudFormation::Interface:
      ParameterLabels:
         DomainName:
            default: Domain name
         HostedZoneId:
            default: Hosted zone

      ParameterGroups:
         -
            Label: DNS
            Parameters:
               - DomainName
         -
            Label: Route 53
            Parameters:
               - HostedZoneId


Parameters:

   DomainName:
      Description: Domain name of git LFS API endpoint.
      Type: String

   HostedZoneId:
      Description: ID of the Route 53 hosted zone in which to create DNS records.
      Type: AWS::Route53::HostedZone::Id


Resources:

   Certificate:
      DependsOn:
         - CertificateAuthorityAuthorization
      Type: AWS::CertificateManager::Certificate
      Properties:
         DomainName:
            Ref: DomainName
         ValidationMethod: DNS
         DomainValidationOptions:
            -
               DomainName:
                  Ref: DomainName
               HostedZoneId:
                  Ref: HostedZoneId
         Tags:
            -
               Key: Name
               Value: git-lfs

   CertificateAuthorityAuthorization:
      Type: AWS::Route53::RecordSet
      Properties:
         HostedZoneId:
            Ref: HostedZoneId
         Name:
            Fn::Sub: ${DomainName}.
         Comment: AWS Certificate Manager
         Type: CAA
         ResourceRecords:
            - 0 issue "amazon.com"
            - 0 issue "amazonaws.com"
            - 0 issue "amazontrust.com"
            - 0 issue "awstrust.com"
         TTL: '172800'


Outputs:

   CertificateArn:
      Description: ARN of the certificate.
      Value:
         Ref: Certificate