如何验证通过terraform创建的acm证书

我正在尝试为3个名为test、valid、jsc和使用现有托管区域的服务创建3个证书。但是terraform在证书验证中失败，声明证书处于挂起的\u验证状态

variable "service-names" {
  type    = list(any)
  default = ["valid", "jsc", "test"]

}



resource "aws_acm_certificate" "cert" {
  for_each = toset(var.service-names)
  domain_name       = "www.us.${each.value}.xxxxx.cloud"
  validation_method = "DNS"

  tags = {
    Name = "www.us.${each.value}.xxxxx.cloud"
  }

  lifecycle {
    create_before_destroy = true
  }
}



data "aws_route53_zone" "ecomzoneinfo" {
  name         = "xxxxx.cloud"
  tags = {
     "Name" = "www.us.${each.value}.xxxxx.cloud"
   }
}

locals {
  dns-record-list = flatten([
    for svc in var.service-names : [
      for dvo in aws_acm_certificate.cert[svc].domain_validation_options : {
        name   = dvo.resource_record_name
      record = dvo.resource_record_value
      type   = dvo.resource_record_type
      service = svc
      }
    ]
  ])
}

resource "aws_route53_record" "ecom-route" {
  for_each = { for idx,dns in local.dns-record-list : "${dns.service}" => dns }
  allow_overwrite = true
  name            = each.value.name
  records         = [each.value.record]
  ttl             = 60
  type            = each.value.type
  zone_id         = data.aws_route53_zone.ecomzoneinfo.zone_id
}

resource "aws_acm_certificate_validation" "ecom" {
   for_each = toset(var.service-names)
   certificate_arn         = aws_acm_certificate.cert[each.value].arn
   validation_record_fqdns = [aws_route53_record.ecom-route[each.value].fqdn]
 }

获取错误声明为证书处于挂起验证状态，是的，我能够确定terraform aws_acm_证书资源创建的证书处于挂起状态。即使我能够看到cname记录添加到区域xxxxx.cloud托管区域下。因此我不确定这里出了什么问题

Error: Error describing created certificate: Expected certificate to be issued but was in state PENDING_VALIDATION
│ 
│   with aws_acm_certificate_validation.ecom["jsc"],
│   on main.tf line 449, in resource "aws_acm_certificate_validation" "ecom":
│  449:   resource "aws_acm_certificate_validation" "ecom" {
│ 
╵
╷
│ Error: Error describing created certificate: Expected certificate to be issued but was in state PENDING_VALIDATION
│ 
│   with aws_acm_certificate_validation.ecom["test"],
│   on main.tf line 449, in resource "aws_acm_certificate_validation" "ecom":
│  449:   resource "aws_acm_certificate_validation" "ecom" {
│ 
╵
╷
│ Error: Error describing created certificate: Expected certificate to be issued but was in state PENDING_VALIDATION
│ 
│   with aws_acm_certificate_validation.ecom["valid"],
│   on main.tf line 449, in resource "aws_acm_certificate_validation" "ecom":
│  449:   resource "aws_acm_certificate_validation" "ecom" {

---

如果您手动执行这些步骤，它们是否有效？所以问题只在于TF？我会先进入web控制台验证ACM希望您创建以进行验证的DNS记录，然后进入Route53并验证这些记录是否已创建。您的地形代码很难理解，因此我将首先验证是否创建了预期的资源。