ACM at some point updated their Domain Validation option to include a Hosted Zone ID for a domain name. You can specify a hosted zone for ACM to validate your certificates, so it is fully automated (unless I am wrong). How long has this been a thing?
[Domain Validation option spec] (https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-certificatemanager-certificate-domainvalidationoption.html)
![[Spoiler] I believe this is new from 2.0](https://i.redd.it/2bhb4bd09rq01.jpg)