ML-DSA is a lattice-based quantum-resistant signature algorithm that prevents unauthorized certificate issuance by adversaries with quantum capabilities. This update allows customers to use ML-DSA-signed certificate authorities and issue end-entity certificates secured by ML-DSA keys.
IAM Roles Anywhere facilitates temporary AWS credentials outside AWS environments using X.509 certificates. The new quantum-safe support improves trust anchor security across all supported AWS regions, including specialized clouds. Independent cryptographic analysis supports ML-DSA's resilience, though real-world adoption and performance metrics may vary.
Source & further reading
IAM Roles Anywhere now supports post-quantum digital certificates ↗Source published 2026-03-09. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.