地形aws_acm_certificate_validation.cert_api:仍在创建..[4m21s过去]，直到

Question

ACM证书验证从未完成，大约45分钟后超时，查看域的AWS托管区，它有cname记录。它从未到达创建Api网关域部分。

主.tf

resource "aws_acm_certificate" "cert_api" {
domain_name       = var.api_domain
validation_method = "DNS"
tags = {
Name = var.api_domain
}
}
resource "aws_acm_certificate_validation" "cert_api" {
certificate_arn         = aws_acm_certificate.cert_api.arn
validation_record_fqdns = aws_route53_record.cert_api_validations.*.fqdn
}

resource "aws_route53_zone" "api" {
name = var.api_domain
}
resource "aws_route53_record" "cert_api_validations" {
allow_overwrite = true
count           = length(aws_acm_certificate.cert_api.domain_validation_options)
zone_id = aws_route53_zone.api.zone_id
name    = element(aws_acm_certificate.cert_api.domain_validation_options.*.resource_record_name, count.index)
type    = element(aws_acm_certificate.cert_api.domain_validation_options.*.resource_record_type, count.index)
records = [element(aws_acm_certificate.cert_api.domain_validation_options.*.resource_record_value, count.index)]
ttl     = 60
}
resource "aws_route53_record" "api-a" {
name    = aws_apigatewayv2_domain_name.api.domain_name
type    = "A"
zone_id = aws_route53_zone.api.zone_id
alias {
name                   = aws_apigatewayv2_domain_name.api.domain_name_configuration[0].target_domain_name
zone_id                = aws_apigatewayv2_domain_name.api.domain_name_configuration[0].hosted_zone_id
evaluate_target_health = false
}
}
resource "aws_apigatewayv2_domain_name" "api" {
domain_name = var.api_domain
domain_name_configuration {
certificate_arn = aws_acm_certificate.cert_api.arn
endpoint_type   = "REGIONAL"
security_policy = "TLS_1_2"
}
}

Answer 1

如果托管区域被销毁并重新配置，则新的名称服务器记录将与新的托管区域相关联。然而域名可能仍然具有以前的名称服务器记录

如果AWS Route 53被用作域名注册商，请前往Route 53>已注册的域>｛您的域名｝>添加或编辑名称服务器并添加新关联的名称服务器记录从托管区域到注册域。