certificate

ACM certificates in AWS provide SSL/TLS certificates for secure HTTPS connections. Stackattack creates certificates with automatic DNS validation through Route53, supporting wildcards and multiple domains.

import * as saws from "@stackattack/aws";

const ctx = saws.context();
const certArn = saws.certificate(ctx, {
  domain: "example.com",
  wildcard: true
});

export const certificateArn = certArn;

Usage

After deploying a certificate, you can use it with other AWS services:

AWS CLI:

# View certificate details
aws acm describe-certificate --certificate-arn arn:aws:acm:us-east-1:123456789012:certificate/12345678-1234-1234-1234-123456789012

Related Components

Certificates work together with other Stackattack components:

• load-balancer - Uses certificates for HTTPS termination
• static-site - Uses certificates for secure CloudFront distributions

Costs

ACM certificates are completely free when used with AWS services:

• Certificate issuance - No cost for requesting, renewing, or using ACM certificates with AWS services like ALB, CloudFront, or API Gateway.

• DNS validation - Route53 DNS queries during validation are minimal and typically cost less than $0.01.

• Automatic renewal - ACM automatically renews certificates before expiration at no cost.

• Wildcard certificates - No additional cost for wildcard (*.example.com) or multi-domain certificates.

Important limitations:

• ACM certificates can only be used with AWS services (ALB, CloudFront, API Gateway, etc.)
• You cannot export private keys for use on non-AWS infrastructure
• For external use cases, consider Let’s Encrypt or commercial certificate authorities

See ACM Pricing for details.

certificate

Creates an ACM certificate with DNS validation and optional wildcard support.

function certificate(ctx: Context, args: CertificateArgs): Output<string>

Parameters

• ctx (Context) - The context for resource naming and tagging
• args (CertificateArgs) - Configuration arguments for the certificate

Returns

• (Output<string>) - Creates an ACM certificate with DNS validation and optional wildcard support.

Functions

getZoneFromDomain

Retrieves the Route53 hosted zone ID for a given domain by extracting the root domain.

function getZoneFromDomain(domain: Input<string>): Output<string>

Parameters

• domain (Input<string>) - The domain name to find the hosted zone for

Returns

• (Output<string>) - Retrieves the Route53 hosted zone ID for a given domain by extracting the root domain.

Interfaces

CertificateArgs

Configuration arguments for creating an ACM certificate.

Properties

• additionalDomains? (Input<string>[]) - Additional domain names to include in the certificate
• domain (Input<string>) - The primary domain name for the certificate
• noPrefix? (boolean) - Whether to skip adding a prefix to the resource name
• noValidate? (boolean) - Whether to skip DNS validation (returns certificate ARN immediately)
• provider? (Provider) - Use a specific provider instance to create certificate resources. This can allow you to create certificate in different region(s) or account(s)
• wildcard? (boolean) - Whether to include a wildcard subdomain (*.domain)
• zone? (Input<string>) - Specific Route53 zone ID (auto-detected from domain if not provided)