CNAME cannot be added as "Proxied" because of ACM AWS

[shantanu.das]

Hi Community.

your kind help is needed: we have got the zone files from the hosting provider where some of the cname uses _xxxxxx.acm-validations.aws which are only in “DNS only” and cannot be proxied. Also, manual addition of these acm.aws cname throws an error “DNS Validation Error (Code: 1004) This record type cannot be proxied”

how to resolve the issue?

Best
Shan

[neiljay]

@shantanu.das

DNS Validation Error (Code: 1004)

This could be that the origin ip may not be resolving. Best bet is to check this CommunityTip

Community Tip - Fixing Code 1004: DNS Validation Error

Error Try the suggestions in this Community Tip to help you fix Code 1004 errors when working on the Cloudflare dashboard. Background A Code 1004 error while working on the Cloudflare dashboard indicates that Cloudflare was unable to complete a requested action. This is a different issue than “Error 1004: Host Not Configured to Serve Web Traffic” or “Error 1004: DNS is still propagating”. Those errors appear to visitors to your website if the origin IP cannot be resolved through your DNS reco…

[michael]

@shantanu.das

cname uses _xxxxxx.acm-validations.aws which are only in “DNS only” and cannot be proxied.

This is a feature, not a bug. If the record is Proxied, then AWS cannot actually validate the record. By forcing you to make them Cloudflare are ensuring that the validation will actually work.