Unable to follow aws instructions for moving an alias in CloudFront due to 'Must specify at least one domain name to use a certificate with a distribution'

[lexhl]

Hi, I am trying to follow the instructions on how to move an alias from an existing alias from one CloudFront distribution to another. The instructions says that I need to set up the target distribution with a certificate that includes the alternative domain name that I want to move: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/CNAMEs.html#alternate-domain-names-move-create-target

However when I try to set up the distribution with the certificate but without the alternative domain names (as directed in the instructions) I run into an error 'Must specify at least one domain name to use a certificate with a distribution' generated I think from this like of code within CDK:

aws-cdk/packages/aws-cdk-lib/aws-cloudfront/lib/distribution.ts

Line 323 in 6fdc458

throw new Error('Must specify at least one domain name to use a certificate with a distribution');

It seems that CDK prevents me from adding a certificate unless I have a domain name; but that means I cannot follow the process for moving an alias from and old distribution to a new one.

[DaniDipp]

I'm running into the same issue.

For conflicting docs, see

aws-cdk/packages/aws-cdk-lib/aws-cloudfront/lib/distribution.ts

Line 134 in 47605c2

* When you want to move a domain name between distributions, you can associate a certificate without specifying any domain names.

and

aws-cdk/packages/aws-cdk-lib/aws-cloudfront/README.md

Lines 118 to 126 in 47605c2

	#### Moving an alternate domain name to a different distribution
	When you try to add an alternate domain name to a distribution but the alternate domain name is already in use on a different distribution, you get a `CNAMEAlreadyExists` error (One or more of the CNAMEs you provided are already associated with a different resource).
	In that case, you might want to move the existing alternate domain name from one distribution (the source distribution) to another (the target distribution). The following steps are an overview of the process. For more information, see [Moving an alternate domain name to a different distribution](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/alternate-domain-names-move.html).
	1. Deploy the stack with the target distribution. The `certificate` property must be specified but the `domainNames` should be absent.
	2. Move the alternate domain name by running CloudFront `associate-alias` command. For the example and preconditions, see the AWS documentation above.
	3. Specify the `domainNames` property with the alternative domain name, then deploy the stack again to resolve the drift at the alternative domain name.