Merge pull request #5887 from hashicorp/b-aws-iam-server-cert-docs

provider/aws: Document lifecycle block needs for IAM Server Certificate
This commit is contained in:
Clint 2016-03-29 14:35:52 -05:00
commit 7d1cfde490
1 changed files with 23 additions and 9 deletions

View File

@ -17,7 +17,7 @@ Certs uploaded to IAM can easily work with other AWS services such as:
- AWS OpsWorks - AWS OpsWorks
For information about server certificates in IAM, see [Managing Server For information about server certificates in IAM, see [Managing Server
Certficates][2] in AWS Documentation. Certificates][2] in AWS Documentation.
## Example Usage ## Example Usage
@ -52,11 +52,23 @@ EOF
**Use in combination with an AWS ELB resource:** **Use in combination with an AWS ELB resource:**
Some properties of an IAM Server Certificates cannot be updated while they are
in use. In order for Terraform to effectively manage a Certificate in this situation, it is
recommended you utilize the `name_prefix` attribute and enable the
`create_before_destroy` [lifecycle block][lifecycle]. This will allow Terraform
to create a new, updated `aws_iam_server_certificate` resource and replace it in
dependant resources before attempting to destroy the old version.
``` ```
resource "aws_iam_server_certificate" "test_cert" { resource "aws_iam_server_certificate" "test_cert" {
name = "some_test_cert" name_prefix = "example-cert"
certificate_body = "${file("self-ca-cert.pem")}" certificate_body = "${file("self-ca-cert.pem")}"
private_key = "${file("test-key.pem")}" private_key = "${file("test-key.pem")}"
lifecycle {
create_before_destroy = true
}
} }
resource "aws_elb" "ourapp" { resource "aws_elb" "ourapp" {
@ -104,3 +116,5 @@ The following arguments are supported:
[1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html
[2]: https://docs.aws.amazon.com/IAM/latest/UserGuide/ManagingServerCerts.html [2]: https://docs.aws.amazon.com/IAM/latest/UserGuide/ManagingServerCerts.html
[lifecycle]: http://localhost:4567/docs/configuration/resources.html