Alias Domain Record Propagation

It sounds like you're experiencing issues with DNS propagation for your alias domain, which is affecting your SSL certificate validation. This can be a frustrating situation, but there are a few things to consider and steps you can take:

1. DNS Propagation Time: While DNS changes typically propagate within 24-48 hours, in some cases it can take longer. However, if it's been several days, there may be other factors at play.

2. DNS Record Verification: Double-check that all your DNS records are correctly configured in your hosted zone. Ensure the A record is pointing to the correct S3 website endpoint, and the CNAME record for ACM certificate validation is exactly as provided by AWS Certificate Manager.

3. DNSSEC: If DNSSEC is enabled for your domain, it could potentially cause issues with DNS resolution. If you have a DNSSEC key, you might want to try disabling it temporarily to see if it resolves the propagation issue.

4. DNS Lookup Tools: Use DNS lookup tools like nslookup or dig to check if your records are resolving correctly. You can also use online DNS propagation checkers to see if the records are visible from different locations globally.

5. Route 53 Support: If you're using Amazon Route 53 for your DNS, and you've verified all settings are correct, consider contacting AWS support. They can help investigate any potential issues with the hosted zone or DNS configuration.

6. Alternative Validation Methods: If DNS validation for your SSL certificate is consistently failing, you might want to explore alternative validation methods offered by ACM, such as email validation, if available for your setup.

7. TTL Settings: Check the Time-To-Live (TTL) settings for your DNS records. If they're set too high, it could delay propagation. Consider lowering the TTL temporarily to speed up propagation.

8. Regional DNS Issues: Sometimes, DNS propagation can be slower or fail in specific regions. Use global DNS checking tools to see if the issue is isolated to particular areas.

If after trying these steps you're still experiencing issues, it may be worth reaching out to AWS support for further assistance, especially if this is preventing your SSL certificate from being validated.

Sources
Redirect to domain for website hosted on S3 Bucket returns "DNSSEC validation failure" | AWS re:Post
SSL Certificate not getting renewed | AWS re:Post
SSL cert not validating | AWS re:Post

Is the SSL certificate status the root issue, or does the issue cover other DNS problem?

If the issue is SSL certificate validation please refer to the following troubleshooting guide, if not could you provide more detail on the issues?

https://docs.aws.amazon.com/acm/latest/userguide/troubleshooting-DNS-validation.html