AWS Certificate Manager Adds ACME Support for Automating TLS Certificate Issuance

Introduction of ACME Support in AWS ACM

AWS Certificate Manager (ACM) has introduced support for the Automatic Certificate Management Environment (ACME) protocol. This change allows for the automated issuance, renewal, and revocation of public TLS certificates via a fully managed ACME server endpoint.

Significance of ACME Support

As the Certification Authority/Browser Forum mandates shorter maximum certificate validity periods, the need for automated certificate renewal becomes critical. By implementing ACME support, AWS ACM enables organizations to manage TLS certificates more effectively, addressing potential service disruptions caused by expired certificates.

Centralized Management and Visibility

Prior to this update, organizations using ACM needed to rely on external certificate authorities, leading to fragmented management and visibility. The new ACM support for ACME consolidates certificate management, enabling PKI administrators to control certificate requests, monitor usage, and enforce organizational policies from a single platform.

Enhanced Controls for PKI Administrators

PKI administrators can now bind IAM roles to ACME accounts and define domain scopes, enhancing access control over certificate requests. Additionally, ACM integrates with AWS CloudTrail for audit logs and AWS CloudWatch for operational monitoring, further improving management capabilities.