search

cds-snc / simplify-privacy-statements-V2

starter-app repo based version of privacy app.
https://simplify-privacy-statements.alpha.canada.ca
MIT License
5 stars 1 forks source link

added fr validation resource #284

Closed omartehsin1 closed 1 year ago

omartehsin1 commented 1 year ago

Summary | Résumé

Created a French DNS Validation resource

github-actions[bot] commented 1 year ago

Production: cloudfront

✅   Terraform Format: success ✅   Terraform Plan: success ✅   Conftest: success ⚠️   WARNING: resources will be destroyed by this change!

Plan: 6 to add, 1 to change, 1 to destroy
Show plan ```terraform Resource actions are indicated with the following symbols: + create ~ update in-place - destroy Terraform will perform the following actions: # aws_acm_certificate.simplify_privacy_statement_certificate (deposed object a36a5bfa) will be destroyed # (left over from a partially-failed replacement of this instance) - resource "aws_acm_certificate" "simplify_privacy_statement_certificate" { - arn = "arn:aws:acm:us-east-1:414662622316:certificate/1861f75e-4c5f-4752-b012-01738304a76b" -> null - domain_name = "simplify-privacy-statements.alpha.canada.ca" -> null - domain_validation_options = [ - { - domain_name = "*.simplify-privacy-statements.alpha.canada.ca" - resource_record_name = "_dcf5483eb09e84041710833f1d9ac991.simplify-privacy-statements.alpha.canada.ca." - resource_record_type = "CNAME" - resource_record_value = "_98fad60b3f1dbea50909273dd1b22e47.sggfvksfyf.acm-validations.aws." }, - { - domain_name = "simplify-privacy-statements.alpha.canada.ca" - resource_record_name = "_dcf5483eb09e84041710833f1d9ac991.simplify-privacy-statements.alpha.canada.ca." - resource_record_type = "CNAME" - resource_record_value = "_98fad60b3f1dbea50909273dd1b22e47.sggfvksfyf.acm-validations.aws." }, ] -> null - id = "arn:aws:acm:us-east-1:414662622316:certificate/1861f75e-4c5f-4752-b012-01738304a76b" -> null - key_algorithm = "RSA_2048" -> null - not_after = "2024-05-01T23:59:59Z" -> null - not_before = "2023-04-03T00:00:00Z" -> null - pending_renewal = false -> null - renewal_eligibility = "ELIGIBLE" -> null - renewal_summary = [] -> null - status = "ISSUED" -> null - subject_alternative_names = [ - "*.simplify-privacy-statements.alpha.canada.ca", - "simplify-privacy-statements.alpha.canada.ca", ] -> null - tags = { - "CostCentre" = "simplify-privacy-statements-production" - "Terraform" = "true" } -> null - tags_all = { - "CostCentre" = "simplify-privacy-statements-production" - "Terraform" = "true" } -> null - type = "AMAZON_ISSUED" -> null - validation_emails = [] -> null - validation_method = "DNS" -> null - options { - certificate_transparency_logging_preference = "ENABLED" -> null } } # aws_acm_certificate_validation.simplify_privacy_statement_certificate_validation will be created + resource "aws_acm_certificate_validation" "simplify_privacy_statement_certificate_validation" { + certificate_arn = "arn:aws:acm:us-east-1:414662622316:certificate/ac07a462-de87-4a9d-98cc-7c865866c22a" + id = (known after apply) + validation_record_fqdns = [ + "_31a9ddd0d4f4d7d8fa2149d13ea8b1f1.simplification-avis-confidentialite.alpha.canada.ca.simplify-privacy-statements.alpha.canada.ca", + "_dcf5483eb09e84041710833f1d9ac991.simplify-privacy-statements.alpha.canada.ca", ] } # aws_cloudfront_distribution.simplify_privacy_app_cf_distribution will be updated in-place ~ resource "aws_cloudfront_distribution" "simplify_privacy_app_cf_distribution" { ~ aliases = [ + "simplification-avis-confidentialite.alpha.canada.ca", # (1 unchanged element hidden) ] id = "E2KDGWZI9S6D8X" tags = { "CostCentre" = "simplify-privacy-statements-production" "Terraform" = "true" } # (19 unchanged attributes hidden) origin { # At least one attribute in this block is (or was) sensitive, # so its contents will not be displayed. } ~ viewer_certificate { ~ acm_certificate_arn = "arn:aws:acm:us-east-1:414662622316:certificate/1861f75e-4c5f-4752-b012-01738304a76b" -> "arn:aws:acm:us-east-1:414662622316:certificate/ac07a462-de87-4a9d-98cc-7c865866c22a" # (3 unchanged attributes hidden) } # (3 unchanged blocks hidden) } # aws_route53_record.simplify_privacy_statement_fr_dns_validation["*.simplification-avis-confidentialite.alpha.canada.ca"] will be created + resource "aws_route53_record" "simplify_privacy_statement_fr_dns_validation" { + allow_overwrite = true + fqdn = (known after apply) + id = (known after apply) + name = "_31a9ddd0d4f4d7d8fa2149d13ea8b1f1.simplification-avis-confidentialite.alpha.canada.ca" + records = [ + "_cb730b07bc01631c1d866cac9c1082b0.tctzzymbbs.acm-validations.aws.", ] + ttl = 60 + type = "CNAME" + zone_id = "Z0014308D84CBSIFU3DF" } # aws_route53_record.simplify_privacy_statement_fr_dns_validation["*.simplify-privacy-statements.alpha.canada.ca"] will be created + resource "aws_route53_record" "simplify_privacy_statement_fr_dns_validation" { + allow_overwrite = true + fqdn = (known after apply) + id = (known after apply) + name = "_dcf5483eb09e84041710833f1d9ac991.simplify-privacy-statements.alpha.canada.ca" + records = [ + "_98fad60b3f1dbea50909273dd1b22e47.sggfvksfyf.acm-validations.aws.", ] + ttl = 60 + type = "CNAME" + zone_id = "Z0014308D84CBSIFU3DF" } # aws_route53_record.simplify_privacy_statement_fr_dns_validation["simplification-avis-confidentialite.alpha.canada.ca"] will be created + resource "aws_route53_record" "simplify_privacy_statement_fr_dns_validation" { + allow_overwrite = true + fqdn = (known after apply) + id = (known after apply) + name = "_31a9ddd0d4f4d7d8fa2149d13ea8b1f1.simplification-avis-confidentialite.alpha.canada.ca" + records = [ + "_cb730b07bc01631c1d866cac9c1082b0.tctzzymbbs.acm-validations.aws.", ] + ttl = 60 + type = "CNAME" + zone_id = "Z0014308D84CBSIFU3DF" } # aws_route53_record.simplify_privacy_statement_fr_dns_validation["simplify-privacy-statements.alpha.canada.ca"] will be created + resource "aws_route53_record" "simplify_privacy_statement_fr_dns_validation" { + allow_overwrite = true + fqdn = (known after apply) + id = (known after apply) + name = "_dcf5483eb09e84041710833f1d9ac991.simplify-privacy-statements.alpha.canada.ca" + records = [ + "_98fad60b3f1dbea50909273dd1b22e47.sggfvksfyf.acm-validations.aws.", ] + ttl = 60 + type = "CNAME" + zone_id = "Z0014308D84CBSIFU3DF" } # aws_route53_record.simplify_privacy_statements_fr_A will be created + resource "aws_route53_record" "simplify_privacy_statements_fr_A" { + allow_overwrite = (known after apply) + fqdn = (known after apply) + id = (known after apply) + name = "simplification-avis-confidentialite.alpha.canada.ca" + type = "A" + zone_id = "Z0014308D84CBSIFU3DF" + alias { + evaluate_target_health = false + name = "d2n4vfhctrrmqr.cloudfront.net" + zone_id = "Z2FDTNDATAQYW2" } } Plan: 6 to add, 1 to change, 1 to destroy. Warning: Argument is deprecated with module.log_bucket.aws_s3_bucket.this, on .terraform/modules/log_bucket/S3_log_bucket/main.tf line 8, in resource "aws_s3_bucket" "this": 8: resource "aws_s3_bucket" "this" { Use the aws_s3_bucket_server_side_encryption_configuration resource instead (and 3 more similar warnings elsewhere) ───────────────────────────────────────────────────────────────────────────── Saved the plan to: plan.tfplan To perform exactly these actions, run the following command to apply: terraform apply "plan.tfplan" Releasing state lock. This may take a few moments... ```
Show Conftest results ```sh 18 tests, 18 passed, 0 warnings, 0 failures, 0 exceptions ```