ApplicationLoadBalancer.addListener fails with "Up to '1' certificate ARNs can be specified, but '2' were specified"

[markusl]

🐛 Bug Report

What is the problem?

ApplicationLoadBalancer.addListener fails with "Up to '1' certificate ARNs can be specified, but '2' were specified"

The certificateArns property is a list, but providing multiple certificates will cause a deployment failure.

Reproduction Steps

    const listener = loadBalancer
      .addListener(`${awsAppPrefix}HttpsListener`, {
        port: 443,
        // Use two certs
        certificateArns: certificates.map((cert) => cert.certificateArn),
        open: false,
      });

Environment

• CDK CLI Version: 1.5.0
• OS: Macbook
• Language: TypeScript

[markusl]

Workaround is to do something like this, but it's not very intuitive:

    const listener = loadBalancer
      .addListener(`${awsAppPrefix}HttpsListener`, {
        port: 443,
        certificateArns: [certificates[0].certificateArn],
        open: false,
      });

    new elbv2.ApplicationListenerCertificate(this, 'dd', {
      listener,
      certificateArns: certificates.map((cert) => cert.certificateArn),
    });

[rix0rrr]

This is because the CloudFormation resource accepts an array that must have exactly one entry: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticloadbalancingv2-listener.html#cfn-elasticloadbalancingv2-listener-certificates

The solution will be to take all certificates after the first (if any) and create ApplicationListenerCertificates for them automatically.