terraform created AWS ACM Certificates every times

[ghost]

This issue was originally opened by @jxin19 as hashicorp/terraform#19031. It was migrated here as a result of the provider split. The original body of the issue is below.

---

Terraform Version

Terraform v0.11.3

Terraform Files

resource "aws_acm_certificate" "cert-2" {
  domain_name = "domain.com"
  subject_alternative_names = [
    "${var.live}",
    "${var.live-api}",
    "${var.live-image}",
    "${var.live-manager}",
    "${var.dev}",
    "${var.dev-api}",
    "${var.dev-image}",
    "${var.dev-manager}"
  ]
  validation_method = "DNS"

  tags {
    Name = "Certification"
  }

  lifecycle {
    create_before_destroy = true
  }
}

resource "aws_route53_record" "cert-2-proof" {
  count = "${length(var.cert-zone-ids)}"
  name = "${lookup(aws_acm_certificate.cert-2.domain_validation_options[count.index], "resource_record_name")}"
  type = "${lookup(aws_acm_certificate.cert-2.domain_validation_options[count.index], "resource_record_type")}"
  zone_id = "${aws_route53_zone.primary.id}"
  records = ["${lookup(aws_acm_certificate.cert-2.domain_validation_options[count.index], "resource_record_value")}"]
  ttl = 30
}

resource "aws_acm_certificate_validation" "cert-2" {
  certificate_arn = "${aws_acm_certificate.cert-2.arn}"
  validation_record_fqdns = ["${aws_route53_record.cert-2-proof.*.fqdn}"]
}

Debug Output

* aws_acm_certificate.cert-2: 1 error(s) occurred:

* aws_acm_certificate.cert-2: Error requesting certificate: LimitExceededException: Error: you have reached your limit of 20 certificates in the last year.
        status code: 400, request id: 7dde0d6d-cb95-11e8-be6e-59f81c3e2a01

I tried request command 'apply' then terraform created AWS ACM Certificates every times.
finally I saw an error "LimitExceededException".
How can I handling?

[bflad]

Hi @jxin19 👋 Sorry you are running into trouble here. Do you have the terraform plan output from before or after you saw this LimitExceededException? If it includes (forces new resource), Terraform will issue a new certificate.

ACM only allows you to create a certain number of certificates per region per year (https://docs.aws.amazon.com/acm/latest/userguide/acm-limits.html) and the LimitExceededException error is what is returned by the ACM when you have reached that limit. You will need to open an AWS Support case to get that limit raised for your account.

We can help you troubleshoot the Terraform side of this if you can post the terraform plan output though. Thanks!

[bflad]

Closing due to lack of response.

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. Thanks!