要验证DNS证书,需要在证书颁发机构中采用合适的DNS验证方法。具体解决方法如下:
aws acm request-certificate --domain-name example.com --validation-method DNS --idempotency-token example-token
aws route53domains get-domain-detail --domain-name example.com
aws route53domains update-domain-nameservers --domain-name example.com --nameservers NS1.EXAMPLE.COM NS2.EXAMPLE.COM
aws route53 change-resource-record-sets --hosted-zone-id --change-batch '{"Changes":[{"Action":"UPSERT","ResourceRecordSet":{"Name":"_example.com","Type":"TXT","TTL":300,"ResourceRecords":[{"Value":"verification-token"}]}}]}'
aws acm describe-certificate --certificate-arn arn:aws:acm:us-east-1:123456789012:certificate/12345678-1234-1234-1234-123456789012 --query 'Certificate.DomainValidationOptions[?ValidationMethod==`DNS`]' --output text
aws acm wait certificate-validated --certificate-arn arn:aws:acm:us-east-1:123456789012:certificate/12345678-1234-1234-1234-123456789012