Route53 PHZ and ACM certificate validation.

Question

IHAC that is using data.all (https://awslabs.github.io/aws-dataall/architecture/). Data.all is deployed in VPC and PHZ created. 
Customer has provided domain for e.g., datamarket.customer.com and provided an SSL certificate for this. Redirect has been setup where nslookup points to PHZ data.datamarket.com. 
In PHZ we have a CNAME which points to an EC2 ALB. What setup is needed so that the datamarket.com domain can be validated by the SSL certificate for datamarket.customer.com? Is that possible or is there any other way this can be achieved?

Answer

Please verify if my understanding of the issue is accurate. Your client has provided you with the domain datamarket.customer.com and has obtained an SSL certificate for it. Could you confirm whether you acquired the SSL certificate through AWS ACM or imported it into AWS ACM? Additionally, you've set up a redirect to a different domain, datamarket.com, and configured a CNAME in the AWS Route 53 public Hosted Zone to the ALB.

To resolve this:

Assuming your client owns both domains, datamarket.customer.com and datamarket.com, you'll need to create another certificate for datamarket.com in AWS ACM and associate it with the ALB.
    Since the root domains are different, separate certificates are required as the same certification cannot be used for both.

Route53 PHZ and ACM certificate validation.

Relevant content