ACM

List Certificate ARNs and DomainName

aws acm list-certificates | jq -r '.CertificateSummaryList[] | .CertificateArn+" "+.DomainName'

arn:aws:acm:ap-southeast-1:987654321:certificate/88c10c4e-a0ba-41e9-bbd4-734e0191e363 *.example.com

Request a Certificate for Apex and Wildcard Domain

➡️ Covers both example.com and *.example.com in a single certificate

aws acm request-certificate --domain-name example.com --subject-alternative-names "*.example.com" --validation-method DNS | jq -r .CertificateArn

arn:aws:acm:ap-southeast-1:987654321:certificate/88c10c4e-a0ba-41e9-bbd4-734e0191e363

Get DNS Validation Records

aws acm describe-certificate --certificate-arn arn:aws:acm:ap-southeast-1:987654321:certificate/88c10c4e-a0ba-41e9-bbd4-734e0191e363 | jq -r '.Certificate.DomainValidationOptions[] | .DomainName+" "+.ResourceRecord.Name+" "+.ResourceRecord.Type+" "+.ResourceRecord.Value'

example.com      _a79865eb4cd1a6ab990a45779b4e0b27.example.com.   CNAME  _424c7224e1614c7c987ac.acm-validations.aws.
*.example.com    _a79865eb4cd1a6ab990a45779b4e0b27.example.com.   CNAME  _424c7224e1614c7c987ac.acm-validations.aws.

Check Certificate Validation Status

aws acm describe-certificate --certificate-arn arn:aws:acm:ap-southeast-1:987654321:certificate/88c10c4e-a0ba-41e9-bbd4-734e0191e363 | jq -r .Certificate.Status

PENDING_VALIDATION

Wait Until Certificate is Issued

aws acm wait certificate-validated --certificate-arn arn:aws:acm:ap-southeast-1:987654321:certificate/88c10c4e-a0ba-41e9-bbd4-734e0191e363

Delete a Certificate

aws acm delete-certificate --certificate-arn arn:aws:acm:ap-southeast-1:987654321:certificate/88c10c4e-a0ba-41e9-bbd4-734e0191e363