[B2BP-1166] Validate ioapp.it ACM certificate and add AWS issuer reco…

…rds (#1425)

src/common/_modules/global/modules/dns/dns_ioweb_it.tf

@@ -23,6 +23,30 @@ resource "azurerm_dns_caa_record" "ioweb_it" {
     value = "digicert.com"
   }
 
+  record {
+    flags = 0
+    tag   = "issue"
+    value = "amazon.com"
+  }
+
+  record {
+    flags = 0
+    tag   = "issue"
+    value = "amazontrust.com"
+  }
+
+  record {
+    flags = 0
+    tag   = "issue"
+    value = "awstrust.com"
+  }
+
+  record {
+    flags = 0
+    tag   = "issue"
+    value = "amazonaws.com"
+  }
+
   record {
     flags = 0
     tag   = "iodef"
@@ -64,3 +88,11 @@ resource "azurerm_dns_cname_record" "zendesk" {
   ttl                 = var.dns_default_ttl_sec
   record              = "hc-io.zendesk.com"
 }
+
+resource "azurerm_dns_cname_record" "aws_cert_validation_ioweb" {
+  name                = "_1b96136662809f31f497b4fcd6b32a8d"
+  zone_name           = azurerm_dns_zone.ioweb_it.name
+  resource_group_name = var.resource_groups.external
+  ttl                 = var.dns_default_ttl_sec
+  record              = "_2de3fc7bfdb25e6a4e58c29dc8b4dba6.zfyfvmchrl.acm-validations.aws."
+}