invalid memory address or nil pointer dereference #30760

Terraform crash plan.md

───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────

Terraform used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols:
  ~ update in-place
+/- create replacement and then destroy

Terraform will perform the following actions:

  # module.EXAMPLE.aws_acm_certificate.EXAMPLE_acm["EXAMPLE"] must be replaced
+/- resource "aws_acm_certificate" "portal_acm" {
      ~ arn                       = "arn:aws:acm:us-east-1:EXAMPLE:certificate/EXAMPLE" -> (known after apply)
      ~ domain_validation_options = [
          - {
              - domain_name           = "*.EXAMPLE.EXAMPLE.EXAMPLE.com"
              - resource_record_name  = "_EXAMPLE.EXAMPLE.EXAMPLE.EXAMPLE.com."
              - resource_record_type  = "CNAME"
              - resource_record_value = "EXAMPLE.EXAMPLE.acm-validations.aws."
            },
          - {
              - domain_name           = "*.EXAMPLE.EXAMPLE.EXAMPLE.com"
              - resource_record_name  = "EXAMPLE.EXAMPLE.EXAMPLE.EXAMPLE.EXAMPLE."
              - resource_record_type  = "CNAME"
              - resource_record_value = "EXAMPLE.EXAMPLE.acm-validations.aws."
            },
		[Repetitive info redacted]
            # (13 unchanged elements hidden)
        ]
      ~ id                        = "arn:aws:acm:us-east-1:EXAMPLE:certificate/EXAMPLE" -> (known after apply)
      ~ status                    = "ISSUED" -> (known after apply)
      ~ subject_alternative_names = [ # forces replacement
          + "*.EXAMPLE.EXAMPLE.com",
          + "*.EXAMPLE.EXAMPLE.com",
          + "EXAMPLE.EXAMPLE.com",
          + "EXAMPLE.EXAMPLE.com",
            # (8 unchanged elements hidden)
        ]
        tags                      = {
            "Domain"      = "EXAMPLE.EXAMPLE.com"
            "Environment" = "EXAMPLE"
            "Name"        = "EXAMPLE-EXAMPLE"
        }
      ~ validation_emails         = [] -> (known after apply)
        # (3 unchanged attributes hidden)

      - options {
          - certificate_transparency_logging_preference = "ENABLED" -> null
        }
    }

  # module.EXAMPLE.aws_cloudfront_distribution.EXAMPLE["EXAMPLE"] will be updated in-place
  ~ resource "aws_cloudfront_distribution" "EXAMPLE" {
        id                             = "EXAMPLE"
        tags                           = {
            "Environment" = (sensitive)
            "Name"        = "EXAMPLE"
        }
        # (21 unchanged attributes hidden)





      ~ viewer_certificate {
          ~ acm_certificate_arn            = "arn:aws:acm:us-east-1:EXAMPLE:certificate/EXAMPLE" -> (known after apply)
            # (3 unchanged attributes hidden)
        }
        # (6 unchanged blocks hidden)
    }

Plan: 1 to add, 1 to change, 1 to destroy.