Amplify certificate notifications?

Unfortunately, there isn't a direct way to receive notifications for certificate renewal issues specifically for Amplify-managed custom domains. Amplify creates and manages these certificates in its own AWS account, which means the standard AWS Certificate Manager (ACM) notification methods won't apply to your situation.

However, you can implement a workaround to monitor the status of your Amplify custom domains:

1. Create a Lambda function that uses the Amplify API to check the status of your custom domains periodically.

2. Set up an Amazon EventBridge (CloudWatch Events) rule to trigger this Lambda function on a schedule, such as daily or weekly.

3. In the Lambda function, you can check for any domains with a status indicating a problem (e.g., "PENDING_VERIFICATION" or "FAILED").

4. If issues are detected, use Amazon Simple Notification Service (SNS) to send notifications to your team.

5. You could also consider logging these findings to AWS Security Hub for centralized monitoring.

This approach would allow you to proactively monitor your Amplify custom domains and receive notifications about potential certificate renewal issues. While it's not a direct notification from Amplify, it can help you identify problems early and take necessary actions.

Remember to regularly review and update your DNS records for your custom domains to prevent deletion that could lead to certificate renewal failures. You might also want to educate your customers about the importance of maintaining these DNS records for uninterrupted service.
Sources
Responding to an event with a Lambda function - AWS Certificate Manager
Developing a high-specificity AWS Health event strategy with AWS User Notifications | AWS re:Post