I've been having a problem creating certificates over the last two days and I have raised a ticket with AWS but it's not moving very quickly and has been referred to internal support. I do not have premium support.
There is no error message like I've been used to in the past, it just says 'Failed'. You can see that the www sub domain verification has failed but the root domain was successful.
I've never seen just a 'Failed' message before. There has always been an error message that gives an idea on the problem. It seems like some sort of unhandled AWS error to me at the moment.
I've reviewed https://repost.aws/knowledge-center/acm-certificate-fail and none of the errors on there apply.
I've created certificates on a fairly regular basis without this problem before. I've had to raise service limits in the past and it doesn't relate to that as I can create the certificate, it just fails.
The failure happens within a short time, several minutes at most. It's not waiting around for an hour to see if the CNAME gets corrected later if it was wrong to begin with for example.
I have tried creating certificates with www only and it's the same, the www verification fails and the CNAME is correct. A CNAME look up returns successfully.
The intention is to use the certificate with a CloudFront Distribution and S3 website hosting but of course I can't do that until it can be made active. I am UK based but using the N. Virginia region like I always do for these.
Hoping someone can help shed some light on this but seems a bit unusual to me and it was needed yesterday for something to go live.
No, I hadn't checked my cloudtrail / cloudwatch logs. I'd only done what I mentioned and raised the ticket. They've come back to me now to say that the domain name required whitelisting internally although apparently the representative I was dealing with should not have mentioned that. Whatever the case, something was required for AWS to action which is not something I have experienced before but useful to be aware of. I have asked for some more information and will add a comment to my question as it may be helpful to others out there.