AWS cli medium security documentation change

Service: cli · 2026-06-16 · Security-related medium

File: cli/latest/reference/acm/request-certificate.md

Summary

Updated certificate options to reflect mandatory transparency logging

Security assessment

Removes transparency logging opt-out and updates documentation to reflect security enforcement. Mitigates risk of undetected malicious certificates.

Diff

diff --git a/cli/latest/reference/acm/request-certificate.md b/cli/latest/reference/acm/request-certificate.md
index abe01bb92..28f00dcda 100644
--- a//cli/latest/reference/acm/request-certificate.md
+++ b//cli/latest/reference/acm/request-certificate.md
@@ -15 +15 @@
-  * [AWS CLI 2.35.3 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.5 Command Reference](../../index.html) »
@@ -251 +251 @@ JSON Syntax:
-> You can use this parameter to specify whether to add the certificate to a certificate transparency log and export your certificate.
+> You can use this parameter to specify whether to export your certificate.
@@ -253 +253 @@ JSON Syntax:
-> Certificate transparency makes it possible to detect SSL/TLS certificates that have been mistakenly or maliciously issued. Certificates that have not been logged typically produce an error message in a browser. For more information, see [Opting Out of Certificate Transparency Logging](https://docs.aws.amazon.com/acm/latest/userguide/acm-bestpractices.html#best-practices-transparency) .
+> Certificate transparency logging opt-out is no longer available. All public certificates are recorded in a certificate transparency log. For more information, see [Certificate Transparency Logging](https://docs.aws.amazon.com/acm/latest/userguide/acm-concepts.html#concept-transparency) .
@@ -259 +259 @@ JSON Syntax:
->> You can opt out of certificate transparency logging by specifying the `DISABLED` option. Opt in by specifying `ENABLED` .
+>> This parameter has been deprecated. Certificate transparency logging opt-out is no longer available. All public certificates are recorded in a certificate transparency log.
@@ -604 +604 @@ CertificateArn -> (string)
-  * [AWS CLI 2.35.3 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.5 Command Reference](../../index.html) »