AWS acm medium security documentation change
Summary
Changed renewal validation start from 60 to 45 days pre-expiry. Updated event notification intervals.
Security assessment
Earlier validation window reduces certificate expiration risks. Event interval changes improve operational security without evidence of patching a vulnerability.
Diff
diff --git a/acm/latest/userguide/dns-renewal-validation.md b/acm/latest/userguide/dns-renewal-validation.md index ff742c630..2b88ae0ca 100644 --- a//acm/latest/userguide/dns-renewal-validation.md +++ b//acm/latest/userguide/dns-renewal-validation.md @@ -9 +9 @@ Managed renewal is fully automated for ACM certificates that were originally iss -At 60 days prior to expiration, ACM checks for the following renewal criteria: +At 45 days prior to expiration, ACM checks for the following renewal criteria: @@ -20 +20 @@ If these criteria are met, ACM considers the domain names validated and renews t -ACM sends AWS Health events and Amazon EventBridge events if it can't automatically validate a domain during renewal. These events are sent at 45 days, 30 days, 15 days, seven days, three days, and one day prior to expiration. For more information, see [Amazon EventBridge support for ACM](./supported-events.html). +ACM sends AWS Health events and Amazon EventBridge events if it can't automatically validate a domain during renewal. These events are sent at 30 days, 15 days, seven days, three days, and one day prior to expiration. For more information, see [Amazon EventBridge support for ACM](./supported-events.html).