AWS Security ChangesHomeSearch

AWS acm medium security documentation change

Service: acm · 2026-02-22 · Security-related medium

File: acm/latest/userguide/email-renewal-validation.md

Summary

Updated validity period to 198 days and modified event notification intervals

Security assessment

Shorter validity period enhances certificate security. Event timing adjustments improve renewal monitoring without evidence of addressing a specific vulnerability.

Diff

diff --git a/acm/latest/userguide/email-renewal-validation.md b/acm/latest/userguide/email-renewal-validation.md
index 2e5cbabf0..1b1faff8c 100644
--- a//acm/latest/userguide/email-renewal-validation.md
+++ b//acm/latest/userguide/email-renewal-validation.md
@@ -9 +9 @@
-ACM certificates are valid for 13 months (395 days). Renewing a certificate requires action by the domain owner. ACM begins sending renewal notices to the email addresses associated with the domain 45 days before expiration. The notifications contain a link that the domain owner can click for renewal. Once all listed domains are validated, ACM issues a renewed certificate with the same ARN.
+ACM certificates are valid for 198 days. Renewing a certificate requires action by the domain owner. ACM begins sending renewal notices to the email addresses associated with the domain 45 days before expiration. The notifications contain a link that the domain owner can click for renewal. Once all listed domains are validated, ACM issues a renewed certificate with the same ARN.
@@ -11 +11 @@ ACM certificates are valid for 13 months (395 days). Renewing a certificate requ
-ACM sends AWS Health events and Amazon EventBridge events if it can't automatically validate a domain during renewal. These events are sent at 45 days, 30 days, 15 days, seven days, three days, and one day prior to expiration. For more information, see [Amazon EventBridge support for ACM](./supported-events.html).
+ACM sends AWS Health events and Amazon EventBridge events if it can't automatically validate a domain during renewal. These events are sent at 30 days, 15 days, seven days, three days, and one day prior to expiration. For more information, see [Amazon EventBridge support for ACM](./supported-events.html).