diff --git a/main.tf b/main.tf
index b9e9e8f..13e74c2 100644
--- a/main.tf
+++ b/main.tf
@@ -36,6 +36,9 @@ resource "aws_acm_certificate" "self" {
 
   lifecycle {
     create_before_destroy = true
+    # Workaround for SAN doesn't maintain order
+    # See https://github.com/terraform-providers/terraform-provider-aws/issues/8531
+    ignore_changes = [subject_alternative_names]
   }
 }