Skip to main content

Posts

AWS SES Domain Verification Stuck: How to Fix 'DKIM Pending' Status

  Few infrastructure tasks are more deceptively simple than verifying a domain in AWS Simple Email Service (SES). You enter your domain, AWS generates three CNAME records, you copy-paste them into your DNS provider, and you wait. And wait. If your domain identity status has hung on "Verification Pending" or "DKIM Pending" for more than 72 hours, you aren't just dealing with slow DNS propagation. You likely have a specific, syntax-based configuration error that prevents AWS from locating your keys. This guide details the root cause of the infamous "stuck verification" issue, specifically regarding the "Double Domain" DNS anomaly, and provides the diagnostic steps to resolve it immediately. The Root Cause: Absolute vs. Relative DNS Names To understand why verification fails, you must understand how AWS SES performs validation. When you enable Easy DKIM, SES generates three CNAME records. These point specific subdomains on your domain (e.g.,  a1...

Troubleshooting 'Invalid Configuration' and Stuck DNS on Vercel Custom Domains

  There are few things in the deployment pipeline more anxiety-inducing than the red "Invalid Configuration" error in the Vercel dashboard. Your Next.js application builds perfectly, the preview URLs work, but your production custom domain is stuck. You might see an endless "Generating SSL" spinner, a generic 404 error on your apex domain (the non-www version), or a "Conflicting Records" warning. This is not a waiting game. If the configuration has been stuck for more than 15 minutes, it is likely a misconfiguration, not a propagation delay. This guide covers the root cause of these DNS failures and provides the specific technical steps to resolve them. The Root Cause: How Vercel Edge Network Validation Works To understand why your domain is failing, you must understand the validation handshake. When you add a domain to Vercel, two distinct processes occur: Ownership Verification:  Vercel checks the DNS records to ensure you control the domain. SSL Certifi...