export AWS_CERTIFICATE=arn:aws:acm:REGION:ACCOUNT:certificate/HASH
export DNS_ZONE=example.com.
export DOMAIN=puns.example.com