resource "aws_acm_certificate" "site" { domain_name = var.domain_name validation_method = "DNS" lifecycle { create_before_destroy = true } }