Automate the ACM certificate validation process

[ben851]

Description

As a developer/operator of GC Notify, I would like the infrastructure to be completely automated. Currently there are manual steps involved for validating the TLS certificates for cloudfront.

WHY are we building?

This will contribute toward BCP and dynamic environment testings while also increasing the resiliency of notify.

WHAT are we building?

Add acm certificate validation to the cloudfront acm certificate

VALUE created by our solution

• Increased resiliency
• BCP readiness
• Dynamic environments for better testing

Acceptance Criteria

Given some context, when (X) action occurs, then (Y) outcome is achieved.

• [ ] The cloudfront certificate is automatically validated when deploying to a new environment
• [ ] The existing cloudfront certificate is not impacted

QA Steps

• [ ] Verified in staging and production

[ben851]

• Created ACM Cert Validation for Staging to be tested

[ben851]

• Came up with a better way to manage these resources, will open a new PR.

[ben851]

• PR up for review, hoping to merge to prod today.

[ben851]

• Merged to prod, working on DNS migration tomorrow morning. Aiming to have this solved by the afternoon.

[ben851]

• DNS Migrated - ACM PR for staging today.

[sastels]

had some issues, Ben is working on it...

[sastels]

One PR done, Jimmy reviewing. Once this is merged, some more work to finish.

[ben851]

• Will create a release candidate Thursday May 18 and reconcile production. Once complete this can be moved to done.

[ben851]

Deployed to prod v1.40

[jimleroyer]

I will QA the task.

[jimleroyer]

Verified in staging environment and things look good. 👍