| Problem | Fix |
|---|---|
| Certificate stuck in “Pending Validation” | Add CNAME record from ACM into Route 53 |
| CloudFront doesn’t see your certificate | Ensure cert is in us-east-1 |
| Wrong domain in cert | Include exact domain (e.g. both www.example.com and example.com) |
| Problem | Fix |
|---|---|
| Domain doesn't point to site | Create A – Alias record to CloudFront distribution |
| Record pointing to wrong region | Use proper distribution URL like d1234.cloudfront.net |
| Propagation delay | Wait 15–30 minutes for DNS to update |
| Problem | Fix |
|---|---|
| 403 Forbidden error | Set up Origin Access Control (OAC) or OAI properly |
| CloudFront shows error page | Ensure correct origin and index document is set |
| Problem | Fix |
|---|---|
| Site not secure in browser | Use custom SSL cert in CloudFront |
| Redirect loop / no HTTPS | Set CloudFront behavior to redirect HTTP to HTTPS |
| S3 static hosting with HTTPS fails | Use CloudFront in front of S3 |
| Problem | Fix |
|---|---|
| Files not loading | Make sure files are public or accessible via CloudFront |
| Wrong bucket policy | Apply correct policy allowing CloudFront access |
| Static hosting not enabled | Enable static website hosting with index.html |