AWS cli documentation change
Summary
Updated delete-certificate documentation to clarify eventual consistency, provide clearer instructions for removing certificate associations, and add information about private CA certificates
Security assessment
The changes clarify operational behavior (eventual consistency) and provide better guidance for certificate deletion procedures. The addition about private CA certificates not being affected by certificate deletion and continuing charges adds important operational security context, but doesn't address a specific security vulnerability.
Diff
diff --git a/cli/latest/reference/acm/delete-certificate.md b/cli/latest/reference/acm/delete-certificate.md index 5bd75e46a..491745454 100644 --- a//cli/latest/reference/acm/delete-certificate.md +++ b//cli/latest/reference/acm/delete-certificate.md @@ -15 +15 @@ - * [AWS CLI 2.34.20 Command Reference](../../index.html) » + * [AWS CLI 2.34.21 Command Reference](../../index.html) » @@ -60 +60 @@ First time using the AWS CLI? See the [User Guide](https://docs.aws.amazon.com/c -Deletes a certificate and its associated private key. If this action succeeds, the certificate no longer appears in the list that can be displayed by calling the ListCertificates action or be retrieved by calling the GetCertificate action. The certificate will not be available for use by Amazon Web Services services integrated with ACM. +Deletes a certificate and its associated private key. If this action succeeds, the certificate is not available for use by Amazon Web Services services integrated with ACM. Deleting a certificate is eventually consistent. The may be a short delay before the certificate no longer appears in the list that can be displayed by calling the ListCertificates action or be retrieved by calling the GetCertificate action. @@ -64 +64,5 @@ Deletes a certificate and its associated private key. If this action succeeds, t -You cannot delete an ACM certificate that is being used by another Amazon Web Services service. To delete a certificate that is in use, the certificate association must first be removed. +You cannot delete an ACM certificate that is being used by another Amazon Web Services service. To delete a certificate that is in use, you must first remove the certificate association using the console or the CLI for the associated service. + +Deleting a certificate issued by a private certificate authority (CA) has no effect on the CA. You will continue to be charged for the CA until it is deleted. For more information, see [Deleting Your Private CA](https://docs.aws.amazon.com/privateca/latest/userguide/PCADeleteCA.html) in the _Private Certificate Authority User Guide_ . + +Deleting a certificate issued by a private certificate authority (CA) has no effect on the CA. You will continue to be charged for the CA until it is deleted. For more information, see [Deleting your private CA](https://docs.aws.amazon.com/privateca/latest/userguide/PCADeleteCA.html) in the _Amazon Web Services Private Certificate Authority User Guide_ . @@ -255 +259 @@ None - * [AWS CLI 2.34.20 Command Reference](../../index.html) » + * [AWS CLI 2.34.21 Command Reference](../../index.html) »