nhs-notify-supplier-api/infrastructure/terraform/components/api/api_gateway_domain.tf at f2acd59efbc57ff21a6e1bdce22439b21cedc63d · NHSDigital/nhs-notify-supplier-api · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
resource "aws_api_gateway_domain_name" "main" {
  count                    = var.manually_configure_mtls_truststore ? 1 :  0
  regional_certificate_arn = aws_acm_certificate_validation.main.certificate_arn
  domain_name              = local.root_domain_name
  security_policy          = "TLS_1_2"

  endpoint_configuration {
    types = ["REGIONAL"]
  }

  depends_on = [
    module.domain_truststore,
    aws_s3_object.placeholder_truststore
  ]

  mutual_tls_authentication {
      truststore_uri     = "s3://${module.domain_truststore.id}/${aws_s3_object.placeholder_truststore[0].key}"
      truststore_version = aws_s3_object.placeholder_truststore[0].version_id
  }

  lifecycle {
    ignore_changes = [
      mutual_tls_authentication
    ]
  }
}

resource "aws_api_gateway_domain_name" "main_nonprod" {
  count                    = !var.manually_configure_mtls_truststore ? 1 :  0
  regional_certificate_arn = aws_acm_certificate_validation.main.certificate_arn
  domain_name              = local.root_domain_name
  security_policy          = "TLS_1_2"

  endpoint_configuration {
    types = ["REGIONAL"]
  }

  depends_on = [
    module.domain_truststore,
    aws_s3_object.placeholder_truststore_nonprod
  ]

  mutual_tls_authentication {
      truststore_uri     = "s3://${module.domain_truststore.id}/${aws_s3_object.placeholder_truststore_nonprod[0].key}"
      truststore_version = aws_s3_object.placeholder_truststore_nonprod[0].version_id
  }
}