Skip to content

CloudFront alternate domain name (CNAME) stuck on orphaned/inaccessible distribution — need it released

0

I'm trying to add "unifiedclubs.com" and "*.unifiedclubs.com" as alternate domain names to my CloudFront distribution (account 160226156232), but I get: "One or more of the CNAMEs you provided are already associated with a different resource."

I've confirmed via aws cloudfront list-distributions that no distribution in my own account has these domains configured. I own the domain and control its DNS via Route 53 in this same account, so I can prove ownership.

I don't have access to whatever account/resource currently holds this CNAME association — possibly a distribution from an old/orphaned AWS account. I've opened a Basic Support case (case: Release alternate domain name (CNAME) association for unifiedclubs.com) but haven't had a response.

Has anyone dealt with this? Is there a way to self-resolve, or does this require AWS Support to force-release it?

asked a month ago47 views

2 Answers
0
Accepted Answer

Hello.

If you contact AWS support, using the following wording should help the process go smoothly.
https://repost.aws/ja/questions/QU3RJ4JmatQM2p8V7uDvAchw/ssl-setup-failed-both-root-and-www-stuck-on-expired-2023-amplify-distribution-cname-already-associated-with-different-resource-confirmed-not-in-my-cloudfront-account

I've experienced the same error before, but it resolved itself automatically after waiting 2-3 hours.
It's possible that AWS is causing delays in the deletion process due to internal reasons.

By the way, I recommend checking not only CloudFront but also Amplify to see if it has been configured.
If the domain in question is being used in Amplify, a duplication error will occur.

EXPERT

answered a month ago

AWS
EXPERT

reviewed a month ago

0

When you encounter the error "One or more of the CNAMEs you provided are already associated with a different resource," it means the alternate domain name is currently associated with another CloudFront distribution or distribution tenant, which could be in your account or a different AWS account.

To resolve this situation, you have a couple of options:

If you have access to the source distribution: You can move the alternate domain name from the existing resource to your target distribution. This process involves setting up your target distribution properly, locating the source distribution that currently has the domain name, and then moving it. The move can be done between standard distributions and/or distribution tenants.

If you don't have access to the source distribution: Since you've confirmed the domain isn't in any distribution in your current account and you own the domain through Route 53, this suggests it may be associated with a resource in a different account (possibly an old account you no longer access). In this case, AWS Support is the appropriate path to resolve the issue.

Since you've already opened a support case, that's the correct approach. For your existing case, you can add additional correspondence through the AWS Support Center (https://console.aws.amazon.com/support/) if you need to provide more information or check on the status. If you find response times are longer than needed for your business requirements, you might also consider reviewing your AWS Support plan options, as higher-tier plans typically offer faster response times for these types of requests.

AWS Support has the tools to verify domain ownership and release CNAME associations when appropriate, which is necessary when the domain is stuck on an inaccessible distribution.
Sources
Move an alternate domain name - Amazon CloudFront

answered a month ago

AWS
EXPERT

reviewed a month ago

AWS
EXPERT

reviewed a month ago

EXPERT

reviewed a month ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.