AWS cli high security documentation change

Service: cli · 2026-04-01 · Security-related high

File: cli/latest/reference/acm/export-certificate.md

Summary

Added note that ACM public certificates created prior to June 17, 2025 cannot be exported

Security assessment

This change introduces a significant restriction on exporting older public certificates (pre-June 17, 2025). The specific date cutoff suggests this may be addressing a security vulnerability or compliance issue with older certificate implementations. This is a security control limiting the export capability of potentially vulnerable certificates.

Diff

diff --git a/cli/latest/reference/acm/export-certificate.md b/cli/latest/reference/acm/export-certificate.md
index 873ea7525..706b3b054 100644
--- a//cli/latest/reference/acm/export-certificate.md
+++ b//cli/latest/reference/acm/export-certificate.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.20 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.21 Command Reference](../../index.html) »
@@ -60 +60 @@ First time using the AWS CLI? See the [User Guide](https://docs.aws.amazon.com/c
-Exports a private certificate issued by a private certificate authority (CA) or public certificate for use anywhere. The exported file contains the certificate, the certificate chain, and the encrypted private key associated with the public key that is embedded in the certificate. For security, you must assign a passphrase for the private key when exporting it.
+Exports a private certificate issued by a private certificate authority (CA) or a public certificate for use anywhere. The exported file contains the certificate, the certificate chain, and the encrypted private key associated with the public key that is embedded in the certificate. For security, you must assign a passphrase for the private key when exporting it.
@@ -63,0 +64,4 @@ For information about exporting and formatting a certificate using the ACM conso
+### Note
+
+ACM public certificates created prior to June 17, 2025 cannot be exported.
+
@@ -311 +315 @@ PrivateKey -> (string)
-  * [AWS CLI 2.34.20 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.21 Command Reference](../../index.html) »