WAF Certificate Chain Check and Repair

Diagnose WAF certificate-chain completeness, repair a supplied PEM bundle, and guide manual upload. The Skill does not discover domains or probe remote TLS endpoints.

Scope

Supported:

• Query a known WAF 3.0 instance with DescribeCerts and inspect IsChainCompleted
• Check a supplied local PEM file
• Fetch or manually locate missing intermediate certificates
• Build and verify a complete chain
• Guide manual upload and re-check WAF certificate status

Out of scope:

• Domain listing, certificate-to-domain binding discovery, or domain configuration queries
• Remote TLS probing by domain, CNAME, or IP
• Automatic certificate upload or deployment APIs