From 076c5bf52e0e0ba4980b6443dc7955d8d77f97fa Mon Sep 17 00:00:00 2001 From: Frank <639906+syphernl@users.noreply.github.com> Date: Thu, 27 Jan 2022 18:13:18 +0100 Subject: [PATCH] fix: handle viewer_certificate.ssl_support_method with CF default certificate (#213) * fix: handle viewer_certificate.ssl_support_method with CF certificates Co-authored-by: cloudpossebot <11232728+cloudpossebot@users.noreply.github.com> Co-authored-by: Yonatan Koren --- main.tf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/main.tf b/main.tf index 50ec1e49..e260aaa5 100644 --- a/main.tf +++ b/main.tf @@ -463,7 +463,7 @@ resource "aws_cloudfront_distribution" "default" { viewer_certificate { acm_certificate_arn = var.acm_certificate_arn - ssl_support_method = "sni-only" + ssl_support_method = local.use_default_acm_certificate ? null : "sni-only" minimum_protocol_version = local.minimum_protocol_version cloudfront_default_certificate = local.use_default_acm_certificate }