Re:Two years with CloudFormation: lessons learned
by gazoakley on Sunday August 12, 2018 @04:00PM
(#17746138)
Terraform can do that: https://www.terraform.io/docs/providers/aws/r/acm_certificat...
That said, one irritating omission I've had to deal with is not being able to add email subscriptions to SNS topics. The underlying AWS API is a bit odd - I don't think it provides an ARN until the subscription is confirmed.
It looks like internal products need to work with cloud formation to enable support, and aws doesn't have a consistent model here. It seems that they are fine with some products cutting corners and not offering support (like DNS based certificate validation)
Inconsistency within aws isn't all that surprising.