ACM fails validating DNS record when multiple nested subdomains

ACM does not validate a DNS record for a domain with multiple subdomain components.

Validation always succeeds for asdf.example.com or *.example.com and I can create a cert with ACM.

If I attempt env.service.asdf.example.com it always fails.

Am I missing something basic?

asked 2 years ago305 views

1 Answer

Are these answers helpful? Upvote the correct answer to help the community benefit from your knowledge.

-1

You will need to create dns zones and records for your sub domains.

You will need a subdomain for asdf.example.com and another subdomain for service.asdf.example.com And then create a ACM cname record in there

EXPERT

answered 2 years ago

EXPERT

reviewed 2 years ago

Adam
2 years ago
Having the CNAME env.service.example.com exist in Route 53 before making the cert isn't required because I can make loremipsum.example.com certs without a corresponding CNAME record. It only fails if there's multiple nested subdomains.
Gary Mclean EXPERT
2 years ago
That’s because loremipsum.example.com is part of your top level domain. You will need to setup sub domain zones to have more levels in your certificates. If you want sub.sub.example.com then you will need the extra DNS zones.

Relevant content