With this auth being handled in a child zone we need a little more configuration

Author: tmclaugh

stacksets/userpool/stackset.yaml

@@ -46,10 +46,12 @@ Resources:
 
   SiteCertificate:
     Type: AWS::CertificateManager::Certificate
-    DependsOn: AuthnzZone
     Properties:
       DomainName: !Ref UserPoolDomainName
       ValidationMethod: DNS
+      DomainValidationOptions:
+        - DomainName: !Ref UserPoolDomainName
+          HostedZoneId: !GetAtt AuthnzZone.Id
 
   UserPoolDomain:
     Type: AWS::Cognito::UserPoolDomain