Skip to content

DnsValidatedCertificate does not fail if certificate is both "pending validation" and "validation: success" #6081

@nsvarich

Description

@nsvarich

As of this morning (Feb 3, 2020) a CDK stack deploy that previously worked, started failing with a Service: AmazonElasticLoadBalancingV2; Status Code: 400; Error Code: CertificateNotFound;

The AWS Certificate Manager console shows the certificate stuck in a Pending Validation state (with Validation Status: Success). I'm guessing this is the root cause of the issue?

I've tried to deploy several times over the last 3 hours with the same error.

Reproduction Steps

Deploy a CDK stack with the following:

const certificate = new DnsValidatedCertificate(stack, 'Cert', {
    domainName,
    hostedZone
});

const lb = new elbv2.ApplicationLoadBalancer(stack, 'ALB', {
    vpc,
    internetFacing: true,
    securityGroup
});

const listener = lb.addListener(getId(resourceMoniker, 'Listener'), {
    port: 443,
    protocol: elbv2.ApplicationProtocol.HTTPS,
    open: false,
    certificateArns: [certificate.certificateArn],
});

Error Log

 13/16 | 10:24:19 PM | CREATE_FAILED        | AWS::ElasticLoadBalancingV2::Listener     | Fargate-
Test-ALB/Fargate-Test-Listener (FargateTestALBFargateTestListenerDDAC2B18) Certificate 
'arn:aws:acm:us-west-1:<account>:certificate/<id>' not found (Service: 
AmazonElasticLoadBalancingV2; Status Code: 400; Error Code: CertificateNotFound; Request ID: 
2747ec92-de97-4e37-890c-06485abcb879)

Environment

  • CLI Version : 1.20.0
  • Framework Version: 1.20.0
  • OS : Ubuntu 18.04
  • Language : English

Other


This is 🐛 Bug Report

Metadata

Metadata

Assignees

Labels

@aws-cdk/aws-certificatemanagerRelated to Amazon Certificate ManagerbugThis issue is a bug.in-progressThis issue is being actively worked on.p2

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions