Does anyone know how I can set up the apigateway custom Doma

Question

Does anyone know how I can set up the apigateway custom DomainName when my route 53 hosted zone amp ACM cert for that domain are in a different account in the same organization I m reading <https docs aws amazon com Route53 latest DeveloperGuide routing to api gateway html|this> and am struggling figuring out how to do this with Pulumi

billowy-army-68599 · Answer

expost the route53 zone and acm cert using resource access manager <https aws amazon com ram >

billowy-army-68599 · Answer

this is for a transit gateway but can be used as a reference to share other things <https github com jaxxstorm pulumi examples blob main typescript aws transit gateway multi account sharedTransitGateway ts L32 L47>

victorious-memory-43562 · Answer

< billowy army 68599> Super helpful Thank you

victorious-memory-43562 · Answer

Oh wow that handles the IAM too Incredible

victorious-memory-43562 · Answer

It seems you can t share hosted zone IDs they have a pretty limited list of the resources you can share with RAM Looking for another solution now

billowy-army-68599 · Answer

oh that sucks disappointed You should be able to set a provider on the resource and update the original account

victorious-memory-43562 · Answer

Update you can have ACM certs for the same domain in different accounts regions they just need to be verified by the owner So I can create a cert during the provisioning of each account trigger an event to the base account to handle the DNS verification then use that domain on APIGWs in that account by referencing the cert created in that account

victorious-memory-43562 · Answer

Not too bad actually