AWS Certificate Manager Supports ACME Certificate Issuance Over AWS PrivateLink

AWS Certificate Manager enables secure ACME TLS certificate issuance and renewal via PrivateLink within AWS VPCs.

By Diana Quinn · Editorial pseudonym · 2026-10-06 · 1 min read

AI-ASSISTED REPORTING · RETROSPECTIVE ARCHIVE

Retrospective edition: 2026-10-06. Source published: 2026-10-06. Added to this archive: 2026-11-03. This briefing was prepared later from the linked announcement; it was not published on this website on the historical edition date.

By creating a VPC interface endpoint to the ACM ACME service, customers can route ACME protocol traffic over AWS’s private network, eliminating public internet exposure without modifying existing ACME clients or URLs. This supports all standard ACME issuance steps, including account creation and domain validation.

The integration maintains full visibility via the ACM console, CloudTrail logs, and CloudWatch metrics for auditing. This feature is available in all commercial AWS Regions, with usual PrivateLink and ACM usage costs applied.

Source & further reading

AWS Certificate Manager now supports ACME issuance through AWS PrivateLink ↗

Source published 2026-10-06. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.