---
inputType: "CA10__CaAwsAcmCertificate__c"
testData:
  - file: test-data.json
importExtracts:
  - file: /types/CA10__CaAwsAcmCertificate__c/object.extracts.yaml
conditions:
  - status: "INCOMPLIANT"
    currentStateMessage: "This certificate is issued for a wildcard (*) domain."
    remediationMessage: "Replace the wildcard certificate with single-domain certificates\
      \ for each domain in use."
    check:
      AND:
        args:
          - NOT_EQUAL:
              left:
                EXTRACT: CA10__status__c
              right:
                TEXT: "ISSUED"
          - STARTS_WITH:
              arg:
                EXTRACT: CA10__domainName__c
              search:
                TEXT: "*"
otherwise:
  status: "COMPLIANT"
  currentStateMessage: "This is not a wildcard certificate."