AWS general documentation change
Summary
Adjusted private certificate quotas and clarified revocation method applicability
Security assessment
Quota limit updates and operational clarifications. No evidence of addressing security vulnerabilities or describing new security features.
Diff
diff --git a/general/latest/gr/pca.md b/general/latest/gr/pca.md index 6bb77c2b4..6abe11db9 100644 --- a//general/latest/gr/pca.md +++ b//general/latest/gr/pca.md @@ -128,2 +128,2 @@ Number of private certificate authorities | Each supported Region: 200 | [Yes]( -Number of private certificates for each CA | us-east-1: 50,000,000 ap-south-1: 50,000,000 ca-central-1: 50,000,000 eu-central-1: 50,000,000 Each of the other supported Regions: 20,000,000 | No | The maximum number of private certificates that a certificate authority (CA) can issue in an account in the current Region. This quota applies to CAs not using complete CRLs. -Number of private certificates for each CA using complete CRLs | Each supported Region: 1,000,000 | [Yes](https://console.aws.amazon.com/servicequotas/home/services/acm-pca/quotas/L-F99AB81B) | The maximum number of private certificates that a certificate authority (CA) can issue in an account in the current Region. This quota applies to CAs using complete CRLs. +Number of private certificates for each CA | Each supported Region: 50,000,000 | No | The maximum number of private certificates that a certificate authority (CA) can issue in an account in the current Region. This quota applies when no revocation is enabled or revocation is enabled using partitioned CRL and/or OCSP. When complete CRL is enabled, the "Number of private certificates for each CA using complete CRLs" limit is applied. +Number of private certificates for each CA using complete CRLs | Each supported Region: 1,000,000 | No | The maximum number of private certificates that a certificate authority (CA) can issue in an account in the current Region. This quota applies to CAs using complete CRLs.