AWS ACM certificate does not enable Create before Destroy misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_233
Category - Subcategory	Public Exposure - Encryption And Protocols
Provider	AWS
Severity	LOW
Framework	Terraform

Impact

It is recommended to enable create_before_destroy argument inside the resource lifecycle configuration block to avoid a possible outage when the certificate needs to be recreated during an update.

How to Fix

[source,go]

resource "aws_acm_certificate" "example" { domain_name = "example.com" validation_method = "DNS"

• lifecycle {
• create_before_destroy = true
• } }

---