I have a public Route 53 root hosted zone redacted.com
which has CAA authority for amazon.com
, which has valid NS records for two hosted zones in different accounts; dev.redacted.com
and qa.redacted.com
. When I request a ACM certificate in the qa
subaccount, the CNAME validation records are not generated/visible. The exact same process and configuration works correctly and as expected in the dev
subaccount. There are no other certificates or records which are interfering with the generation and name resolution is working correctly.
How can I retrieve the DNS domain validation options or otherwise debug the problem? Thanks!