AWS acm documentation change

Service: acm · 2026-04-10 · Documentation low

File: acm/latest/userguide/acm-supported-actions-in-cloudtrail.md

Summary

Added documentation for the SearchCertificates API operation in CloudTrail logs, including an example log entry showing the API call details.

Security assessment

This change adds documentation about CloudTrail logging for the SearchCertificates API, which is a security monitoring feature. It helps users understand what audit trails are available for certificate searches, improving security visibility. No evidence of addressing a specific security vulnerability.

Diff

diff --git a/acm/latest/userguide/acm-supported-actions-in-cloudtrail.md b/acm/latest/userguide/acm-supported-actions-in-cloudtrail.md
index 78b5477ec..bcb85de5a 100644
--- a//acm/latest/userguide/acm-supported-actions-in-cloudtrail.md
+++ b//acm/latest/userguide/acm-supported-actions-in-cloudtrail.md
@@ -5 +5 @@
-Add tagsDeleting a certificate (DeleteCertificate)Describing a certificate (DescribeCertificate)Exporting a certificate (ExportCertificate)Import a certificate (ImportCertificate)Listing certificates (ListCertificates)List tagsRemoving TagsRequesting a certificate (RequestCertificate)Revoke a certificate (RevokeCertificate)Resend emailRetrieving a certificate (GetCertificate)
+Add tagsDeleting a certificate (DeleteCertificate)Describing a certificate (DescribeCertificate)Exporting a certificate (ExportCertificate)Import a certificate (ImportCertificate)Listing certificates (ListCertificates)List tagsRemoving TagsRequesting a certificate (RequestCertificate)Revoke a certificate (RevokeCertificate)Resend emailRetrieving a certificate (GetCertificate)Searching certificates (SearchCertificates)
@@ -47,0 +48,2 @@ The following sections provide example logs for the supported API operations.
+  * Searching certificates (SearchCertificates)
+
@@ -628,0 +631,39 @@ The following CloudTrail example shows the results of a call to the [GetCertific
+## Searching certificates ([SearchCertificates](https://docs.aws.amazon.com/acm/latest/APIReference/API_SearchCertificates.html))
+
+The following CloudTrail example shows the results of a call to the [SearchCertificates](https://docs.aws.amazon.com/acm/latest/APIReference/API_SearchCertificates.html) API. 
+    
+    
+    {
+    
+       "Records":[
+          {
+             "eventVersion":"1.04",
+             "userIdentity":{
+                "type":"IAMUser",
+                "principalId":"AIDACKCEVSQ6C2EXAMPLE",
+                "arn":"arn:aws:iam::123456789012:user/Alice",
+                "accountId":"123456789012",
+                "accessKeyId":"AKIAIOSFODNN7EXAMPLE",
+                "userName":"Alice"
+             },
+             "eventTime":"2016-04-06T13:53:53Z",
+             "eventSource":"acm.amazonaws.com",
+             "eventName":"SearchCertificates",
+             "awsRegion":"us-east-1",
+             "sourceIPAddress":"192.0.2.0",
+             "userAgent":"aws-cli/1.10.16",
+             "readOnly":true,
+             "requestParameters":{
+                "maxResults":10,
+                "sortBy":"CREATED_AT",
+                "sortOrder":"DESCENDING"
+             },
+             "responseElements":null,
+             "requestID":"01234567-89ab-cdef-0123-456789abcdef",
+             "eventID":"01234567-89ab-cdef-0123-456789abcdef",
+             "eventType":"AwsApiCall",
+             "recipientAccountId":"123456789012"
+          }
+       ]
+    }
+