[M] Configure vanity url for admin and api to user friendly domain

[ashley-dhillon]

Description:

Configures API to use vanity url that has been decided to align with bc parks domain management strategy.

data.bcparks.ca

data.bcparks.ca/api/parks/names = names and can break it down further /names etc. or just /parks for all info

data.bcparks.ca/admin/parks = admin portal for registrar

Acceptance Criteria:

• data.bcparks.ca is official domain for park name register
  • data.bcparks.ca/admin/parks = registrar portal
  • data.bcparks.ca/api/parks etc. = api access

Notes:/Gotchas

• Certificate creation could be done automagically by SAM Template, or manually in the console in AWS ACM & then the ARN can be copied into the SAM template.
• Certificates must be created in AWS Region us-east-1.
• Once requested, the CNAME name and CNAME value must be copied into the DNS provider.
• DNS verification could take as long as 48h. To troubleshoot the Pending Validation step, follow this article: https://repost.aws/knowledge-center/acm-certificate-pending-validation
• GoDaddy automatically adds the domain name to the CNAME - for example: 1234567890data.bcparks.ca should be entered as 1234567890data, otherwise only 1234567890data.bcparks.ca.bcparks.ca will resolve.

[JLWade]

See Park Data Service Teams channel for conversation around urls. Unblocking this ticket

[cameronpettit]

Waiting for DNS verification from Rob. Moving to blocked.

[cameronpettit]

A new problem has arisen for this task - currently Day Use Pass imports a wildcard certificate for *.bcparks.ca, which is affecting our requests for our vanity url such as data.bcparks.ca and test-data.bcparks.ca. Since Data Register's vanity url falls under DUP's wildcard umbrella, certification for Data Register falls under the wrong CloudFront distribution.

What needs to happen to fix this? Our DUP distribution likely needs to drop the wildcard certificate and adopt specific certificates, ie reserve.bcparks.ca and reserve-admin.bcparks.ca. This needs to occur without affecting DUP (now is a good time to make this change). Then, DR can have its own specific certificates.

A&R has no vanity url so it has been unaffected by this.

[manuji]

Tested on Dev, TEST & PROD: Passed ✅

• Verified all the Admin portal vanity URLs are working.
• Verified that the vanity API URLs are working fine as well.
• Passing to PO review.