Is the example for DSN Validation with Route 53 wrong? It shows iterating over the

exampleCertificate.domainValidationOptions

output in a way that doesn't look like it would work.