CCM-11056 adding custom DNS

Author: aidenvaines-cgi

infrastructure/terraform/components/api/acm_certificate.tf

@@ -0,0 +1,13 @@
+resource "aws_acm_certificate" "main" {
+  domain_name       = local.root_domain_name
+  validation_method = "DNS"
+
+  lifecycle {
+    create_before_destroy = true
+  }
+}
+
+resource "aws_acm_certificate_validation" "main" {
+  certificate_arn = aws_acm_certificate.main.arn
+  validation_record_fqdns = [for record in aws_route53_record.acm_validation : record.fqdn]
+}

infrastructure/terraform/components/api/api_gateway_domain.tf

@@ -0,0 +1,9 @@
+resource "aws_api_gateway_domain_name" "main" {
+  regional_certificate_arn = aws_acm_certificate_validation.main.certificate_arn
+  domain_name              = local.root_domain_name
+  security_policy          = "TLS_1_2"
+
+  endpoint_configuration {
+    types = ["REGIONAL"]
+  }
+}

infrastructure/terraform/components/api/locals.tf

@@ -1,5 +1,7 @@
 locals {
   aws_lambda_functions_dir_path = "../../../../lambdas"
+  root_domain_name              = "${var.environment}.${local.acct.zone_names["supplier-api"]}" # e.g. [main|dev|abxy0].supplier-api.[dev|nonprod|prod].nhsnotify.national.nhs.uk
+  root_domain_nameservers       = "${var.environment}.${local.acct.zone_nameservers["supplier-api"]}"
 
   openapi_spec = templatefile("${path.module}/resources/spec.tmpl.json", {
     APIG_EXECUTION_ROLE_ARN = aws_iam_role.api_gateway_execution_role.arn

infrastructure/terraform/components/api/route53_record_acm_validation.tf

@@ -0,0 +1,17 @@
+resource "aws_route53_record" "acm_validation" {
+  for_each = {
+    for dvo in aws_acm_certificate.main.domain_validation_options :
+    dvo.domain_name => {
+      name   = dvo.resource_record_name
+      record = dvo.resource_record_value
+      type   = dvo.resource_record_type
+    } if dvo.domain_name == local.root_domain_name
+  }
+
+  allow_overwrite = true
+  name            = each.value.name
+  records         = [each.value.record]
+  type            = each.value.type
+  zone_id         = local.acct.dns_zone["id"]
+  ttl             = 60
+}