- Additional templates for bare domain only, www->root
- Include certificate validation using CNAME DNS record as part of template. Until official CloudFormation support, potential solutions:
- Add custom resource to delete the CNAME DNS record used for validation in Route 53 hosted zone