AWS cli medium security documentation change

Service: cli · 2025-10-01 · Security-related medium

File: cli/latest/reference/transfer/import-certificate.md

Summary

Added detailed documentation about DaysUntilExpiry CloudWatch metric specifications

Security assessment

Expands certificate expiration monitoring documentation with metric specifications, directly supporting security best practices for certificate lifecycle management.

Diff

diff --git a/cli/latest/reference/transfer/import-certificate.md b/cli/latest/reference/transfer/import-certificate.md
index 01d70d947..895a14ede 100644
--- a//cli/latest/reference/transfer/import-certificate.md
+++ b//cli/latest/reference/transfer/import-certificate.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.3 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.5 Command Reference](../../index.html) »
@@ -62,0 +63,6 @@ You can import both the certificate and its chain in the `Certificate` parameter
+After importing a certificate, Transfer Family automatically creates a Amazon CloudWatch metric called `DaysUntilExpiry` that tracks the number of days until the certificate expires. The metric is based on the `InactiveDate` parameter and is published daily in the `AWS/Transfer` namespace.
+
+### Warning
+
+It can take up to a full day after importing a certificate for Transfer Family to emit the `DaysUntilExpiry` metric to your account.
+
@@ -65 +71,12 @@ You can import both the certificate and its chain in the `Certificate` parameter
-If you use the `Certificate` parameter to upload both the certificate and its chain, don’t use the `CertificateChain` parameter.
+> If you use the `Certificate` parameter to upload both the certificate and its chain, don’t use the `CertificateChain` parameter.
+
+**CloudWatch monitoring**
+
+The `DaysUntilExpiry` metric includes the following specifications:
+
+  * **Units:** Count (days)
+  * **Dimensions:** `CertificateId` (always present), `Description` (if provided during certificate import)
+  * **Statistics:** Minimum, Maximum, Average
+  * **Frequency:** Published daily
+
+
@@ -365 +382 @@ CertificateId -> (string)
-  * [AWS CLI 2.31.3 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.5 Command Reference](../../index.html) »