fix: add us-east-1 as provider for certificate and certificate validation

Author: burib

main.tf

@@ -10,13 +10,16 @@ resource "aws_acm_certificate" "wildcard_cert" {
   subject_alternative_names = [
     "*.${aws_route53_zone.this.name}"
   ]
+
+  provider = aws.us_east_1 # ACM certificates must be created in us-east-1 for CloudFront
 }
 
 resource "aws_acm_certificate_validation" "wildcard_cert" {
   certificate_arn = aws_acm_certificate.wildcard_cert.arn
   validation_record_fqdns = [
     aws_route53_record.wildcard_cert_validation.fqdn
   ]
+  provider = aws.us_east_1
 }
 
 resource "aws_route53_record" "wildcard_cert_validation" {
@@ -34,11 +37,13 @@ resource "aws_ssm_parameter" "hosted_zone_id" {
   value       = aws_route53_zone.this.zone_id
   description = "Route53 Hosted Zone ID for ${aws_route53_zone.this.name}"
   type        = "String"
+  overwrite   = true
 }
 
 resource "aws_ssm_parameter" "wildcard_cert_arn" {
   name        = "/certificates/${replace(aws_route53_zone.this.name, ".", "-DOT-")}/wildcard/arn"
   value       = aws_acm_certificate.wildcard_cert.arn
   description = "Wildcard Certificate ARN of *.${aws_route53_zone.this.name}"
   type        = "String"
+  overwrite   = true
 }

providers.tf

@@ -3,8 +3,9 @@ terraform {
 
   required_providers {
     aws = {
-      source  = "hashicorp/aws"
-      version = ">= 5.0" # minimum 5.x is required to be able to use this module
+      source                = "hashicorp/aws"
+      version               = ">= 5.0" # minimum 5.x is required to be able to use this module
+      configuration_aliases = [aws.us_east_1]
     }
   }
 }