The DNS record type CAA (Certification Authority Authorization) instructs Certificate Authorities (CAs) on whether to issue SSL/TLS certificates for a domain or not. This record reduces the risk of unauthorized certificates being issued for a domain.
If you are using CAA records, you need to add both of the following CAA records in order to allow Strattic (via Amazon) to issue your SSL certificate for your live site.
CAA DNS Settings
Type: CAA.
Name: example.com
Tag: issue
CA domain name: amazon.com
Type: CAA.
Name: example.com
Tag: issuewild
CA domain name: amazon.com