title: Migrate redirected domains to CloudFront/S3
body: <p>I have a handful of domains registered for brand protection reasons that are currently managed in a rather manual registrar, but it currently handles redirection to the main domain.</p>
  <p>I am moving DNS from this provider over to Route53 using Terraform. I'm setting up a redirector for the brand protection domains using S3, but running into a catch-22:</p>
  <ol>
  <li>If I want a single S3 bucket to handle the redirects I need to put CloudFront in front of it, which means I need an SSL cert valid for the various domains, which means I need DNS to already be in Route53 for the validation.</li>
  <li>If I want to avoid breaking the redirects during this migration, I can't move the DNS until the redirector is in place.</li>
  </ol>
  <p>This means I think I have the following options:</p>
  <ol>
  <li>Migrate the domains into Route53 first, then create the CloudFront distribution. Redirects will break until this is complete.</li>
  <li>Create multiple S3 buckets for each domain, which won't cover wildcard domains (e.g. *.aliasdomain.com), but can at least do the apex and www for instance (and http only).</li>
  <li>Manually create the necessary certificate and import it into Terraform.</li>
  </ol>
  <p>Have I missed an obvious alternative? Ideally I would create a single redirector that would handle all http traffic to begin with, then sort out https later.</p>