The new IssueCertificateDetails CloudTrail events capture the full certificate data, including all X.509 fields, the issuing CA, requester identity, and signing status for both successful and failed certificate issuances. Previously, only issuance success and certificate ARNs were logged, limiting auditing capabilities.
This logging improves tracking for compliance, inventory, algorithm migration, and failure diagnosis. Events are delivered automatically with no configuration or extra cost beyond standard CloudTrail usage and are available in all AWS Regions offering Private CA.
Source & further reading
AWS Private CA now provides detailed certificate issuance logs ↗Source published 2026-10-05. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.