October DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsPC HealthRecommendedCrashes, freezes, slowdowns? Check your PC nowSpot repairable issues before they interrupt work.Check PCOctober DealsAmazon USDeal season is back - check today's better picksAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
Cupertino desk3 min

Stop AWS Amplify Redirects on Your iOS Universal Links AASA File

Apple requires the AASA file for Universal Links to be served directly over HTTPS. Find the Amplify rule redirecting it, check every associated hostname, and validate the response before testing the app.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

A 301 from an apple-app-site-association (AASA) URL is a hosting problem: Apple does not support redirects when it fetches the file for Universal Links. Make the exact HTTPS endpoint named by the app’s Associated Domains entitlement serve the AASA file directly, then check its response and JSON before troubleshooting the app.

Check the AASA URL directly

Request the precise endpoint for the hostname in the app’s Associated Domains entitlement, typically https://example.com/.well-known/apple-app-site-association. Replace example.com with the actual associated host. Apple’s TN3155: Debugging Universal Links recommends inspecting the response with curl -v; this makes the status and headers visible instead of relying on a browser that may follow a redirect automatically.

As an Amazon Associate I earn from qualifying purchases.

curl -v https://example.com/.well-known/apple-app-site-association

Look for the HTTP status and any Location header. A 301 or 302 means the AASA request is being redirected, which Apple does not support. The exact Amplify rule responsible depends on your deployed configuration and response; this check establishes what the endpoint is returning, not which rule caused it.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Find the matching Amplify rule

In the AWS Amplify console, open the app’s Rewrites and redirects settings and review the rules in their listed order. Amplify processes rules from top to bottom, so an earlier broad pattern can match an AASA request before a more specific rule. AWS documents the behavior and rule-ordering examples in its Amplify Hosting redirects documentation and redirect examples.

#1 Best Overall
Apple iPhone 14, 128GB, Midnight - Unlocked (Renewed)
  • This phone is unlocked and compatible with any carrier of choice on GSM and CDMA networks (e.g. AT&T, T-Mobile, Sprint, Verizon, US Cellular, Cricket, Metro, Tracfone, Mint Mobile, etc.).
  • Please check with your carrier to verify compatibility.
  • The device does not come with headphones or a SIM card. It does include a generic (Mfi certified) charging cable.
  • Tested for battery health and guaranteed to have a minimum battery capacity of 80%.
  • Check for a rule specifically matching /.well-known/apple-app-site-association or /apple-app-site-association.
  • Check host-normalization rules, such as apex-to-www, that may redirect the request to another hostname.
  • Check broad wildcard or single-page-app fallback rules that may include the AASA path.

A 301 changes the destination. A 200 rewrite serves destination content while retaining the requested URL, but the status label alone does not prove the AASA file is being served correctly. The requested endpoint must return the association file directly; do not rely on a redirect or treat an ordinary route rewrite as proof that the AASA response is correct.

Serve the file on every associated domain

Configure each hostname used for Universal Links to serve its AASA file at the required HTTPS path, without redirecting the request to a different hostname. Apple requires a matching AASA URL for each specific subdomain: a file served at the apex domain does not automatically cover www or another subdomain. Check each host named in the entitlement rather than testing only one domain.

Rank #2
Apple iPhone 16, 128GB, Pink - Unlocked (Renewed)
  • 6.1" Super Retina XDR OLED, HDR10, Dolby Vision, 1000nits (typ), 2000nits (HBM), 2556x1179px at 460ppi, 3561mAh Battery
  • 128GB 8GB RAM, Apple A18 (3nm), Hexa-core (2x4.04 GHz + 4x2.20 GHz), Apple GPU 5-core, 16‑core Neural Engine
  • Rear camera: 48MP, f/1.6, wide + 12MP, f/2.2, ultrawide, Front Camera: 12MP, f/1.9, wide, iOS 18, upgradable to iOS 18.5
  • 4G LTE: 1/2/3/4/5/7/8/12/13/14/17/18/19/20/25/26/28/29/30/32/34/38/39/40/41/42/48/53/66/71, 5G: n1/2/3/5/7/8/12/14/20/25/26/28/29/30/38/40/41/48/53/66/70/71/75/76/77/78/79 - Dual eSIM
  • Unlocked for freedom to choose your carrier. Compatible with both GSM & CDMA networks. The phone is unlocked to work with all GSM Carriers & CDMA Carriers Including AT&T, T-Mobile, Verizon, Sprint., Etc.

This also applies when a site normally redirects from an apex domain to www, or vice versa. Keep that behavior for ordinary pages if desired, but make the AASA endpoint available directly on each associated hostname. Apple describes the required hosting and domain matching in its Universal Links debugging note and Associated Domains documentation.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Verify the response before testing the app again

  1. Repeat the direct request. Run curl -v against each exact associated hostname and AASA path. Confirm the response is not a 301 or 302 and inspect the headers and body.
  2. Validate the body. Confirm the response contains the intended AASA JSON and that the JSON parses. Apple’s TN3155 documents supported current and legacy AASA structures; use the structure appropriate to your app.
  3. Investigate access errors. If the response is 403 or 404, check the file’s path, public access policy, and any user-agent filtering. Apple’s CDN needs to be able to fetch the file. TN3155 also suggests trying an arbitrary user agent when diagnosing denied access.
  4. Check the app configuration. Once the endpoint is correct, compare the exact hostname in the Associated Domains entitlement with the AASA content. Confirm the app identifier and the applicable paths or components match the links you are testing.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

If Universal Links still open in Safari

A working AASA response is necessary, but it is not the only configuration to verify. After confirming direct hosting, check that the tested host is the one in the app’s Associated Domains entitlement and that the AASA rules authorize the intended app and URL paths. Apple’s debugging guidance covers checking the response and association; its Associated Domains documentation explains the app-side setup.

Rank #3
Apple iPhone 15, 128GB, Black - Unlocked (Renewed)
  • 6.1inch Super Retina XDR display. Aluminum with color-infused glass back. Ring/Silent switch
  • Dynamic Island. A magical way to interact with iPhone. A16 Bionic chip with 5-core GPU
  • Advanced dual-camera system. 48MP Main | Ultra Wide. Super-high-resolution photos (24MP and 48MP). Next-generation portraits with Focus and Depth Control. 4X optical zoom range
  • Emergency SOS via satellite. Crash Detection. Roadside Assistance via satellite
  • Up to 26 hours video playback. USB C, Supports USB 2. Face ID

For a 301 specifically, start with the server response and Amplify rule order. App-side changes cannot make Apple accept a redirected AASA request.

Quick Recap

Bestseller No. 1
Apple iPhone 14, 128GB, Midnight - Unlocked (Renewed)
Apple iPhone 14, 128GB, Midnight - Unlocked (Renewed)
Please check with your carrier to verify compatibility.; Tested for battery health and guaranteed to have a minimum battery capacity of 80%.
$300.00
Bestseller No. 3
Apple iPhone 15, 128GB, Black - Unlocked (Renewed)
Apple iPhone 15, 128GB, Black - Unlocked (Renewed)
Dynamic Island. A magical way to interact with iPhone. A16 Bionic chip with 5-core GPU; Emergency SOS via satellite. Crash Detection. Roadside Assistance via satellite
$405.00
Bestseller No. 4
Apple iPhone 13, 128GB, Midnight - Unlocked (Renewed) | Unlocked
Apple iPhone 13, 128GB, Midnight - Unlocked (Renewed) | Unlocked
There will be no visible cosmetic imperfections when held at an arm’s length.; Product may come in generic Box.
$262.00
Best Value
Apple iPhone 16e, 128GB, Black - Unlocked (Renewed)
  • 6.1" Super Retina XDR OLED, HDR10, 800 nits (HBM), 1200 nits (peak), 2532x1170px at 460ppi, 4005mAh Battery
  • 8GB RAM, Apple A18 6-core CPU (2 performance + 4 efficiency cores), Apple GPU 4-core, 16‑core Neural Engine
  • Rear camera: 48MP, f/1.6, wide, Front Camera: 12MP, f/1.9, wide, iOS 18.3.1, upgradable to iOS 18.5
  • Connectivity: Global 4G LTE, Sub-6 GHz 5G, LTE, Wi-Fi 6, Bluetooth 5.3, NFC, USB-C, Wireless Charging (7.5W). (does not have mmWave 5G or MagSafe or physical SIM card) - Dual eSIM Only
  • Unlocked for freedom to choose your carrier. Compatible with both GSM & CDMA networks. The phone is unlocked to work with all GSM Carriers & CDMA Carriers Including AT&T, T-Mobile, Verizon, Straight Talk., Etc.
Rank #4
Apple iPhone 13, 128GB, Midnight - Unlocked (Renewed) | Unlocked
  • This pre-owned product is not Apple certified, but has been professionally inspected, tested and cleaned by Amazon-qualified suppliers.
  • There will be no visible cosmetic imperfections when held at an arm’s length.
  • This product is eligible for a replacement or refund within 90 days of receipt if you are not satisfied.
  • Product may come in generic Box.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
PC Slower Than It Used to Be?Free scan - under a minute
Crashes, No Sound, or Screen Glitches?Free driver scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.