runbooks cert dns-check

Auto-generated from runbooks cert dns-check --help on 2026-05-21. Source of truth: runbooks PyPI package v1.3.22

Usage: runbooks cert dns-check [OPTIONS]

  Check ACM DNS validation CNAME records via dig.

  Discovers certificates in PENDING_VALIDATION status or with FAILED renewal,
  then queries each certificate's required CNAME validation record and checks
  whether it is present in DNS via `dig`.

  Output table columns:   Domain       — certificate domain name   Required
  CNAME — validation record name → value   DNS Status   — PRESENT or MISSING
  Action       — remediation step

  Examples:     runbooks cert dns-check     runbooks cert dns-check --ops-
  profile $AWS_OPERATIONS_PROFILE     runbooks cert dns-check --all-accounts
  --management-profile mgmt

Options:
  --profile TEXT  AWS profile name
  --region TEXT   AWS region  [default: ap-southeast-2]
  --all-accounts  Scan all Landing Zone accounts via Organizations
  --help          Show this message and exit.

Examples