跳至內容

CloudFront alternate domain name (CNAME) stuck on orphaned/inaccessible distribution — need it released

0

I'm trying to add "unifiedclubs.com" and "*.unifiedclubs.com" as alternate domain names to my CloudFront distribution (account 160226156232), but I get: "One or more of the CNAMEs you provided are already associated with a different resource."

I've confirmed via aws cloudfront list-distributions that no distribution in my own account has these domains configured. I own the domain and control its DNS via Route 53 in this same account, so I can prove ownership.

I don't have access to whatever account/resource currently holds this CNAME association — possibly a distribution from an old/orphaned AWS account. I've opened a Basic Support case (case: Release alternate domain name (CNAME) association for unifiedclubs.com) but haven't had a response.

Has anyone dealt with this? Is there a way to self-resolve, or does this require AWS Support to force-release it?

已提問 3 個月前檢視次數 90 次

2 個答案
0
已接受的答案

Hello.

If you contact AWS support, using the following wording should help the process go smoothly.
https://repost.aws/ja/questions/QU3RJ4JmatQM2p8V7uDvAchw/ssl-setup-failed-both-root-and-www-stuck-on-expired-2023-amplify-distribution-cname-already-associated-with-different-resource-confirmed-not-in-my-cloudfront-account

I've experienced the same error before, but it resolved itself automatically after waiting 2-3 hours.
It's possible that AWS is causing delays in the deletion process due to internal reasons.

By the way, I recommend checking not only CloudFront but also Amplify to see if it has been configured.
If the domain in question is being used in Amplify, a duplication error will occur.

專家

已回答 3 個月前

AWS
專家

已審閱 3 個月前

0

When you encounter the error "One or more of the CNAMEs you provided are already associated with a different resource," it means the alternate domain name is currently associated with another CloudFront distribution or distribution tenant, which could be in your account or a different AWS account.

To resolve this situation, you have a couple of options:

If you have access to the source distribution: You can move the alternate domain name from the existing resource to your target distribution. This process involves setting up your target distribution properly, locating the source distribution that currently has the domain name, and then moving it. The move can be done between standard distributions and/or distribution tenants.

If you don't have access to the source distribution: Since you've confirmed the domain isn't in any distribution in your current account and you own the domain through Route 53, this suggests it may be associated with a resource in a different account (possibly an old account you no longer access). In this case, AWS Support is the appropriate path to resolve the issue.

Since you've already opened a support case, that's the correct approach. For your existing case, you can add additional correspondence through the AWS Support Center (https://console.aws.amazon.com/support/) if you need to provide more information or check on the status. If you find response times are longer than needed for your business requirements, you might also consider reviewing your AWS Support plan options, as higher-tier plans typically offer faster response times for these types of requests.

AWS Support has the tools to verify domain ownership and release CNAME associations when appropriate, which is necessary when the domain is stuck on an inaccessible distribution.
Sources
Move an alternate domain name - Amazon CloudFront

已回答 3 個月前

AWS
專家

已審閱 3 個月前

AWS
專家

已審閱 3 個月前

專家

已審閱 3 個月前

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。