Summary

The aws_acm module should support requesting certificates from AWS certificate manager. Currently the module only supports imported certificates.
Private certificates are easier to support and automate because they do not require validation.

I am trying to support custom domain endpoints for the new opensearch module PR #859. This requires setting up a certificate which is issued by a trusted authority; having a self-signed imported cert would not work. It would be sufficient to support private certificates.

Issue Type

Feature Idea

Component Name

aws_acm

Additional Information

The request-certificate operation would require new attributes:

1. domain-name
2. validation-method (email, dns)
3. List of subject-alternative-names
4. idempotency-token
5. domain-validation-options (for email validation)
6. options
7. certificate-authority-arn

It should be easier to support and automate cert validation using DNS, assuming DNS is managed by Route53.

Code of Conduct

• I agree to follow the Ansible Code of Conduct