Lifecycle Meta-Arguments

Changing an argument on a load balancer's TLS certificate forces replacement. By default Terraform destroys the old certificate first, causing an outage while listeners still point to it. Which setting makes Terraform create the new one before removing the old?