Updated logic to handle SSL certs

streamlit-server/alb.tf

@@ -128,7 +128,7 @@ resource "aws_lb_listener" "https_8501" {
   port              = "8501"
   protocol          = "HTTPS"
   ssl_policy        = "ELBSecurityPolicy-2016-08"
-  certificate_arn   = var.acm_arn_dev
+  certificate_arn   = lookup(var.acm_arns, var.environment)
 
   default_action {
     type             = "forward"
@@ -141,7 +141,7 @@ resource "aws_lb_listener" "https_8502" {
   port              = "8502"
   protocol          = "HTTPS"
   ssl_policy        = "ELBSecurityPolicy-2016-08"
-  certificate_arn   = var.acm_arn_dev
+  certificate_arn   = lookup(var.acm_arns, var.environment)
 
   default_action {
     type             = "forward"
@@ -154,7 +154,7 @@ resource "aws_lb_listener" "https_8503" {
   port              = "8503"
   protocol          = "HTTPS"
   ssl_policy        = "ELBSecurityPolicy-2016-08"
-  certificate_arn   = var.acm_arn_dev
+  certificate_arn   = lookup(var.acm_arns, var.environment)
 
   default_action {
     type             = "forward"

streamlit-server/variables.tf

@@ -12,7 +12,7 @@ variable "project_name" {
 # required
 variable "environment" {
   type    = string
-  default = "dev"
+  # default = "dev"
 }
 
 
@@ -59,6 +59,15 @@ variable "acm_arn_dev" {
   default = "arn:aws:acm:us-east-2:660131068782:certificate/947e04b3-be22-43bf-bea2-a0ad3b221d70"
 }
 
+variable "acm_arns" {
+  type = map(string)
+  default = {
+    dev  = "arn:aws:acm:us-east-2:660131068782:certificate/947e04b3-be22-43bf-bea2-a0ad3b221d70"
+    uat  = "arn:aws:acm:us-east-2:975049960860:certificate/e036e76d-1f4f-496e-ac97-5f65ec4a34cc"
+    prod = "arn:aws:acm:region:account-id:certificate/prod-cert-id"
+  }
+}
+
 variable "secret_key" {
   type    = string
 }