AWS Certificate Manager
Table of Contents
How-to
Use DNS to Validate Domain Ownership
- You can revoke permission at any time by removing the record
Support second level subdomains
the asterisk (*) must be in the leftmost position of the domain name and can protect only one subdomain level.
Unfortunately multiple wildcarded domains like *.*.example.com are not possible/supported. However, things like *.api.example.com is ok.