Fix certificate validation when not creating DNS record

Fixed

• When validating certificate, do not assume this code created the DNS record (since it is optional)

Wait for certificate validation

Fixed

• Always have an aws_acm_certificate_validation resource
  • This is how we can depend on / know when the certificate has been validated and issued.
• Get the certificate ARN from the validation resource
  • The validation resource's certificate ARN is available once the certificate has been issued:

    The aws_api_gateway_domain_name resource expects dependency on the aws_acm_certificate_validation as only verified certificates can be used. This can be made either explicitly by adding the depends_on = [aws_acm_certificate_validation.cert] attribute. Or implicitly by referring certificate ARN from the validation resource where it will be available after the resource creation: regional_certificate_arn = aws_acm_certificate_validation.cert.certificate_arn.
    (source)

  • Note that we are using this as the resource name, rather than cert as used in that documentation snippet.

Add `validation_id` output, use Ubuntu 22.04 for test

Fixed

• Specify at least a major version of Ubuntu (used for running test in GitHub Actions)

Added

• Add a validation_id output that might help enable us wait for certificate validation

Initial release

Added

• Add code for creating an ACM Certificate
• Add code to optionally create a DNS record (on Cloudflare) for validating that certificate request