Amazon CAA - certificate is still pending


for a CNAME I need to correctly configure the Amazon CAA.

I have added the following DNS records, but the certificate cannot be generated as you can see in the following screenshot.

What could be the cause?

Thanks a lot

How recently did you add the CAA for Amazon? Is it possible that it’s just taking some time to propagate? Can you get any more debug logs for the certificate that is “pending validation”?