Troubleshooting custom domains

1. After you update your DNS records with your third-party domain provider, you can use a tool such as dig or a free website such as https://www.whatsmydns.net/ to verify that your CNAME record is resolving correctly. The following screenshot demonstrates how to use whatsmydns.net to check your CNAME record for the domain www.example.com.

   

2. Choose Search, and whatsmydns.net displays the results for your CNAME. The following screenshot is an example of a list of results that verify that the CNAME resolves correctly to a cloudfront.net URL.

   

1. If your custom domain is stuck in the Pending Verification state, verify that your CNAME records are resolving. See the previous troubleshooting topic, How do I verify that my CNAME resolves, for instructions on performing this task.

2. If your CNAME records are not resolving, confirm that the CNAME entry exists in your DNS settings with your domain provider.

   Important

   It is important to update your CNAME records as soon as you create your custom domain. After your app is created in the Amplify console, your CNAME record is checked every few minutes to determine if it resolves. If it doesn’t resolve after an hour, the check is made every few hours, which can lead to a delay in your domain being ready to use. If you added or updated your CNAME records a few hours after you created your app, this is the most likely cause for your app to get stuck in the Pending Verification state.

3. If you have verified that the CNAME record exists, then there may be an issue with your DNS provider. You can either contact the DNS provider to diagnose why the DNS verification CNAME is not resolving or you can migrate your DNS to Route 53. For more information, see Making Amazon Route 53 the DNS service for an existing domain.

1. Sign in to the Amazon Route 53 console

2. In the navigation pane, choose Hosted Zones and then choose the name of the domain you are connecting.

3. Record the name server values from the Hosted Zone Details section. You need these values to complete the next step. The following screenshot of the Route 53 console displays the location of the name server values in the lower-right corner.

   

4. In the navigation pane, choose Registered domains. Verify that the name servers displayed on the Registered domains section match the name server values that you recorded in the previous step from the Hosted Zone Details section. If they do not match, edit the name server values to match the values in your Hosted Zone. The following screenshot of the Route 53 console displays the location of the name server values on the right side.

   

5. If this doesn't resolve the issue, contact AWS Support. For more information, see Creating a support case in the AWS Support User Guide.

1. Sign in to the Amazon CloudFront console and verify that you don't have this domain deployed to another distribution. A single CNAME record can be attached to one CloudFront distribution at a time.

2. If you previously deployed the domain to a CloudFront distribution you must remove it.

   1. Choose Distributions on the left navigation menu.

   2. Select the name of the distribution to edit.

   3. Choose the General tab. In the Settings section, choose Edit.

   4. Remove the domain name from Alternate domain name (CNAME). Then choose, Save changes.

3. Confirm that no other CloudFront distribution exists that is using this domain in the current AWS account or other AWS accounts. If it won't disrupt any currently running services, try deleting and recreating the hosted zone.

4. Check to see whether this domain is connected to a different Amplify app that you own. If so, make sure you are not trying to reuse one of the hostnames. If you are using www.example.com for another app, you cannot use www.example.com with the app that you are currently connecting. You can use other subdomains, such as blog.example.com.

5. If this domain was successfully connected to another app and then deleted within the last hour, try again after at least one hour has passed. If you still see this exception after 6 hours, contact AWS Support. For more information, see Creating a support case in the AWS Support User Guide.

6. If you manage your domain through Route 53, make sure to clean up any hosted zone CNAME or ALIAS records that point to the old CloudFront distribution.

7. After completing the preceding steps, remove the custom domain from Amplify Hosting and start over with the workflow to connect a custom domain in the Amplify console.

To add a CAA record to trust an Amazon certificate authority

1. Configure a CAA record with your domain provider to trust at least one of Amazon’s certificate authority domains. For more information about configuring the CAA record, see Certification Authority Authorization (CAA) problems in the AWS Certificate Manager User Guide.

2. Use one of the following methods to update your SSL certificate:

   • Manually update using the Amplify console.

     Note

     This method will cause down time for your custom domain.

     1. Sign in to the AWS Management Console and open the Amplify console.

     2. Choose your app that you want to add a CAA record to.

     3. In the navigation pane, choose App Settings, Domain management.

     4. On the Domain management page, delete the custom domain.

     5. Connect your app to the custom domain again. This process issues a new SSL certificate and its intermediate certificates can now be managed by ACM.

        To reconnect your app to your custom domain, use one of the following procedures that corresponds to the domain provider you are using.

        • Adding a custom domain managed by Amazon Route 53.

        • Adding a custom domain managed by a third-party DNS provider.

        • Updating DNS records for a domain managed by GoDaddy.

   • Contact AWS Support to have your SSL certificate reissued.