Skip to content
By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post
About re:Post

CNAME for Improved security failed x3

0

My DNS is pointed to IONOS, and they say there is no issue but AWS is showing the 3 CNAME records for improved security as failed. I have deleted and re-added them, waited days (actually I was months since the first time as I didn't recognize that it had failed).

I tried to get support from AWS and they said I needed to pay more as with a basic plan I cannot create a ticket. I am hoping I can get some support as I think it is not fair to ask me to pay more in order to find out why something is not working, but prefer not to leave AWS.

  • Gary Mclean EXPERT
    3 years ago

    To understand the picture a little bit more, please elaborate whats failed? What do the CNAMES point too?

Topics
Networking & Content DeliveryAWS Well-Architected Framework
Tags
Domain Name System (DNS)Security
Language
English
asked 3 years ago328 views
1 Answer
0

Hi Derek,

Good day!

I can provide some general guidance to help you troubleshoot the problem:

  1. Verify that the CNAME records you added in the IONOS DNS settings match the required values provided by AWS. Make sure there are no typos or missing characters.
  2. Keep in mind that DNS changes can take time to propagate globally. Although changes usually propagate within a few hours, it's possible that it may take longer in some cases. Waiting for a reasonable period (up to 48 hours) is recommended.
  3. Make sure that the CNAME records are correctly created in the IONOS DNS management interface. Check for any error messages or warnings that might indicate issues with record creation. **4) Use DNS lookup tools or online DNS checking services(DNS checker, nslookup ) to verify if the CNAME records are resolving correctly. This can help identify if the issue lies with the DNS configuration itself.
  4. If you're using AWS Route 53 as your DNS service, make sure that the hosted zone and record sets are properly configured. Verify that the records match what is expected and that there are no conflicts or misconfigurations.

Hope this helps!

answered 3 years ago
  • DerekK
    3 years ago

    Thank you. for 1. The records are copied (there is a copy button) and pasted. They were also deleted and reposted, so I don't think there could be an error. 2.It was first done and left for months so that should have been enough time. They were deleted and re-added last week and still giving the same errors so time should not be the factor. 3. I spoke to Ionos and they said there is no errors on their side. 4. It is connected, email is working, but only the added security is failed (all 3 added security records failed). Is there a site that can check that? 5. I am not using Route 53

    If there is a site that can support or check that would be great.

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Relevant content