AWSTemplateFormatVersion: "2010-09-09" Resources: Certificate1: Type: "AWS::CertificateManager::Certificate" Properties: DomainName: "subdomain.example.com" DomainValidationOptions: - DomainName: "subdomain.example.com" ValidationDomain: "example.com" Certificate2: Type: "AWS::CertificateManager::Certificate" Properties: DomainName: "example.com" DomainValidationOptions: - DomainName: "example.com" ValidationDomain: "example.com" Certificate3: Type: AWS::CertificateManager::Certificate Properties: DomainName: "*.aws.domain.com" ValidationMethod: DNS DomainValidationOptions: # Don't fail when one of the values don't exist - DomainName: aws.domain.com HostedZoneId: !ImportValue SubdomainHostedZoneId