serverless/serverless · error · ServerlessError

ROUTE53_CERTIFICATE_VALIDATION_RECORDS_FAILED

ROUTE53_CERTIFICATE_VALIDATION_RECORDS_FAILED

Error message

Failed to create certificate validation records: ${err.message}

What it means

Error "Failed to create certificate validation records: ${err.message}" thrown in serverless/serverless.

Source

Thrown at packages/serverless/lib/plugins/aws/domains/aws/route53-wrapper.js:202

                  Type: record.Type,
                  TTL: 300,
                  ResourceRecords: [
                    {
                      Value: record.Value,
                    },
                  ],
                },
              },
            ],
            Comment: `DNS validation record created by "${Globals.pluginName}" for ACM certificate`,
          },
          HostedZoneId: hostedZoneId,
        }

        await this.route53.send(new ChangeResourceRecordSetsCommand(params))
      }
    } catch (err) {
      throw new ServerlessError(
        `Failed to create certificate validation records: ${err.message}`,
        ServerlessErrorCodes.route53
          .ROUTE53_CERTIFICATE_VALIDATION_RECORDS_FAILED,
        { originalMessage: err.message },
      )
    }
  }

  /**
   * Change A Alias record through Route53 based on given action
   * @param {string} action String descriptor of change to be made. Valid actions are ['UPSERT', 'DELETE']
   * @param {DomainConfig} domain DomainInfo object containing info about custom domain
   * @returns {Promise<void>}
   */
  async changeResourceRecordSet(action, domain) {
    if (domain.createRoute53Record === false) {
      Logging.logInfo(
        `Skipping ${action === ChangeAction.DELETE ? 'removal' : 'creation'} of Route53 record.`,

View on GitHub (pinned to b9d7ea51c8)

Solutions

1. Grant route53:ChangeResourceRecordSets permission on the hosted zone and check the underlying error message.

When it happens

Trigger: Thrown at packages/serverless/lib/plugins/aws/domains/aws/route53-wrapper.js:202 when the library encounters an invalid state.

Common situations: See trigger scenarios.

Understand the failure class

• SSL/TLS and certificate errors — how TLS handshakes and certificate validation fail.

AI-assisted analysis of serverless/serverless@b9d7ea51c8 (2026-08-13). Data as JSON: /api/errors/3c2dda0e0d34172d. Report an issue: GitHub.