Certificate Validation Failed: Adjusting CAA Record

CloudGuard WAF as a Service provides managed certificate issuance and maintenance. We use AWS Certificate Manager to issue certificates for domains onboarded to the service.

While onboarding your Web Application or Web API to WAF SaaS, you may encounter the following error:

This means that one or more domain names have failed validation due to a Certification Authority Authorization (CAA) error, and you must update your CAA records and request a certificate again.

The value field in your CAA record must contain one of the following domain names:

• amazon.com

• amazontrust.com

• awstrust.com

• amazonaws.com

Source: https://docs.aws.amazon.com/acm/latest/userguide/troubleshooting-caa.html