I have a public Route 53 root hosted zone redacted.com which has CAA authority for amazon.com, which has valid NS records for two hosted zones in different accounts; dev.redacted.com and qa.redacted.com. When I request a ACM certificate in the qa subaccount, the CNAME validation records are not generated/visible. The exact same process and configuration works correctly and as expected in the dev subaccount. There are no other certificates or records which are interfering with the generation and name resolution is working correctly.
How can I retrieve the DNS domain validation options or otherwise debug the problem? Thanks!
AWS UFFICIALEAggiornata 2 anni fa