AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-04-01 · Documentation medium

File: cli/latest/reference/acm/describe-certificate.md

Summary

Added clarification that the Export attribute cannot be updated after certificate creation

Security assessment

This change documents an important security control - the immutability of certificate export settings after creation. This prevents security configuration drift and ensures export permissions cannot be changed post-creation, which is a security best practice.

Diff

diff --git a/cli/latest/reference/acm/describe-certificate.md b/cli/latest/reference/acm/describe-certificate.md
index 11c07e0de..69229c306 100644
--- a//cli/latest/reference/acm/describe-certificate.md
+++ b//cli/latest/reference/acm/describe-certificate.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.20 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.21 Command Reference](../../index.html) »
@@ -882 +882 @@ Certificate -> (structure)
->>> You can opt in to allow the export of your certificates by specifying `ENABLED` .
+>>> You can opt in to allow the export of your certificates by specifying `ENABLED` . You cannot update the value of `Export` after the the certificate is created.
@@ -901 +901 @@ Certificate -> (structure)
-  * [AWS CLI 2.34.20 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.21 Command Reference](../../index.html) »