No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

Ok, I figured that docs are missing provider option:
```  certCertificateValidation:
    type: aws:acm:CertificateValidation
    properties:
      certificateArn: ${certificate.arn}
      validationRecordFqdns:
        - ${certValidation.fqdn}
    options:
      provider: ${us-east-provider}```
which is redundant as only `us-east-1` certs are good for CDN but anyway

now what we have is that validation has no errors but it times out, it just never happens :disappointed:

nobody emphasizes this but you *MUST create hosted zone manually and MATCH NS records from domain with hosted zone*

when hosted zone is curated by Pulumi it is being recreated multiple times and your NS records get messed