ACM

create domain validation records in cloudflare read domain validation options output from acm

this config typically should only exist within the us-east-1 region the domain validation records appear to be tied to the certificate name so a cert named xyz.com in us-east-1 will have the same validation record as a cert named xyz.com in us-west-2 so there is no need to run this in other regions