tag: DNS validation

AWS Certificate Manager is killing email validation for public certificates by September 2027, so you'll need to migrate to DNS validation before the deadline. This move follows the CA/B Forum's industry push to ditch email-based domain validation, making DNS the standard way to prove you own your domain.

AWS Certificate Manager now supports switching your existing TLS certificates from email to DNS validation without reissuing them or changing their ARN—perfect timing since email validation gets deprecated in 2027. This means you can keep your CI/CD pipelines and load balancer configs intact while enabling fully automated certificate renewals across all AWS regions.