missing DNS validation record - amazon-cloudfront

Question

I really need some help here.
I am trying to use terraform to infrastructure s3, route53, cloudfront distribution. But it has been having this below error message and I have been stuck two days. I really appreciate if someone can help me out.
**Error:
missing .shecan.link DNS validation record: _aa34525380696522413db4f0382fdfd6.shecan.link*
Error infor:
with aws_acm_certificate_validation.cert_validation,
│ on acm.tf line 25, in resource "aws_acm_certificate_validation" "cert_validation":
│ 25: resource "aws_acm_certificate_validation" "cert_validation" {[enter image description here][1]
Here is my route53.tf:
resource "aws_route53_record" "root-a" {
zone_id = var.zone_id
name = var.domain_name
type = "A"
alias {
name = aws_cloudfront_distribution.root_s3_distribution.domain_name
zone_id = aws_cloudfront_distribution.root_s3_distribution.hosted_zone_id
evaluate_target_health = false
}
}
resource "aws_route53_record" "www-a" {
zone_id = var.zone_id
name = "www.${var.domain_name}"
type = "A"
alias {
name = aws_cloudfront_distribution.www_s3_distribution.domain_name
zone_id = aws_cloudfront_distribution.www_s3_distribution.hosted_zone_id
evaluate_target_health = false
}
}
# resource "aws_route53_record" "cert_validation" {
# for_each = {
# for dvo in aws_acm_certificate.ssl_certificate.domain_validation_options : dvo.domain_name => {
# name = dvo.resource_record_name
# record = dvo.resource_record_value
# type = dvo.resource_record_type
# zone_id = var.zone_id
# }
# }
# allow_overwrite = true
# name = each.value.name
# records = [each.value.record]
# ttl = 60
# type = each.value.type
# zone_id = each.value.zone_id
# }
acm.tf
resource "aws_acm_certificate" "ssl_certificate" {
provider = aws.acm_provider
domain_name = var.domain_name
subject_alternative_names = ["*.${var.domain_name}"]
validation_method = "DNS"
# tags = var.common_tags
lifecycle {
create_before_destroy = true
}
}
# data "aws_route53_zone" "root_bucket" {
# name = var.domain_name
# private_zone = false
# }
# data "aws_route53_zone" "www_bucket" {
# name = "www.${var.domain_name}"
# private_zone = false
# }
resource "aws_acm_certificate_validation" "cert_validation" {
provider = aws.acm_provider
certificate_arn = aws_acm_certificate.ssl_certificate.arn
validation_record_fqdns = [for record in aws_route53_record.cert_validation : record.fqdn]
}
resource "aws_route53_record" "cert_validation" {
for_each = {
for dvo in aws_acm_certificate.ssl_certificate.domain_validation_options : dvo.domain_name => {
name = dvo.resource_record_name
record = dvo.resource_record_value
type = dvo.resource_record_type
zone_id = var.zone_id
# zone_id = dvo.domain_name == "www.${var.domain_name}" ? data.aws_route53_zone.www_bucket.zone_id : data.aws_route53_zone.root_bucket.zone_id
}
}
allow_overwrite = true
name = each.value.name
records = [each.value.record]
ttl = 60
type = each.value.type
zone_id = each.value.zone_id
}