title: CloudFormation AWS::CertificateManager::Certificate automated certificate validation
body: <p>According the AWS docs at <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-certificatemanager-certificate-domainvalidationoption.html#cfn-certificatemanager-certificate-domainvalidationoption-hostedzoneid" rel="noreferrer">here</a> and <a href="https://aws.amazon.com/about-aws/whats-new/2020/06/aws-certificate-manager-extends-automation-certificate-issuance-via-cloudformation/" rel="noreferrer">here</a> I should be able to automate a certificate creation <em>and validation</em> using cloudformation. Apparently when you specify a <code>HostedZoneId</code> in the <code>DomainValidationOptions</code>, it is supposed to create the required DNS record to complete the validation (at least that is what it seems from the very vague documentation). My CF template for the cert looks like this:</p>
  <pre><code>Resources:
    MyAPICert:
      Type: AWS::CertificateManager::Certificate
      Properties:
        DomainName: xxxx.dev.mydomain.io
        DomainValidationOptions:
          - DomainName: mydomain.io
            HostedZoneId: /hostedzone/Z03XXXXXXXXXXXX
        ValidationMethod: DNS
  </code></pre>
  <p>'mydomain.io' (changed of course) was registered using AWS as registrar as the documents say must be the case for automated validation to work.</p>
  <p>This template above is included in a serverless.yml as a resource. However, when I deploy, the stack creation is just stuck waiting for the DNS record - i.e. it does not add the required CNAME entry as I understand it is <em>supposed</em> to do and as such the stack is stuck.</p>
  <p>Has anyone gotten this feature to work?</p>
  <p>And, yes, I know about the 3rd party custom resources that try to do the same thing, I don't want to use them if CF is supposed to do this natively now.</p>