fix: handle viewer_certificate.ssl_support_method with CF default cer…

…tificate (#213) * fix: handle viewer_certificate.ssl_support_method with CF certificates Co-authored-by: cloudpossebot <[email protected]> Co-authored-by: Yonatan Koren <[email protected]>
cloudposse · Jan 27, 2022 · 076c5bf · 076c5bf
1 parent c19ddbd
commit 076c5bf
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/main.tf b/main.tf
@@ -463,7 +463,7 @@ resource "aws_cloudfront_distribution" "default" {
 
   viewer_certificate {
     acm_certificate_arn            = var.acm_certificate_arn
-    ssl_support_method             = "sni-only"
+    ssl_support_method             = local.use_default_acm_certificate ? null : "sni-only"
     minimum_protocol_version       = local.minimum_protocol_version
     cloudfront_default_certificate = local.use_default_acm_certificate
   }