diff --git a/domains.tf b/domains.tf
index 4ce158f..2b294e2 100644
--- a/domains.tf
+++ b/domains.tf
@@ -16,10 +16,13 @@ resource "aws_amplify_domain_association" "domain" {
     }
   }
   lifecycle {
+    precondition {
+      condition     = certicate_settings.type != "CUSTOM"
+      error_message = "Changes to custom certificates are not ignored"
+    }
     ignore_changes = [
-      sub_domain,
-      certificate_settings
+      certificate_settings,
+      sub_domain
     ]
   }
-
 }