AWS Certificate Manager Adds Managed ACME Protocol Support for Public TLS Certificates

ACM users can automate issuance and renewal of short-validity public certificates using standard ACMEv2 clients and centralized governance.

By Noah Ellis · Editorial pseudonym · 2026-07-06 · 1 min read

AI-ASSISTED REPORTING · RETROSPECTIVE ARCHIVE

Retrospective edition: 2026-07-06. Source published: 2026-07-06. Added to this archive: 2026-11-03. This briefing was prepared later from the linked announcement; it was not published on this website on the historical edition date.

AWS Certificate Manager introduced a managed ACME server endpoint delivering public TLS certificates from Amazon Trust Services with 45-day validity. This complies with upcoming CA/Browser Forum requirements and facilitates full automation of certificate lifecycle.

Administrators can restrict domain scopes and enforce policies on wildcard certificates, delegating issuance securely without exposing DNS credentials. Certificate activities log to CloudTrail and CloudWatch for auditability. While AWS explains capabilities, external validation or adoption metrics are not included.

Source & further reading

AWS Certificate Manager now supports the ACME protocol for public certificates ↗

Source published 2026-07-06. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.