I’m translating some of this https://github.com/pulumi/examples/blob/master/aws-ts-static-website/index.ts to Go. Performing the ACM certificate domain validation seems problematic though. In typescript it’s just this:

const certificateValidationDomain = new aws.route53.Record(`${config.targetDomain}-validation`, {
        name: certificate.domainValidationOptions[0].resourceRecordName,
        zoneId: hostedZoneId,
        type: certificate.domainValidationOptions[0].resourceRecordType,
        records: [certificate.domainValidationOptions[0].resourceRecordValue],
        ttl: tenMinutes,
    });